Drive.bat virus (Removal Guide) - May 2018 update

What is Drive.bat virus?

Drive.bat virus is a dangerous Trojan horse which is capable of damaging victim's data and making it useless

Drive.bat virus is a malicious cyber infection classified as a Trojan horse.^[1] PC users can download it by clicking on a malicious ads, downloading drive.zip file, opening spam e-mails or file-bundles. However, it manages to proliferate since 2004 by spreading via external devices, like SD cards, USB flash drives, hard-drives, etc. Once the virus infects the external device, all files and folders stored on it are transformed into the shortcuts similar to the one of a USB device. Consequently, the data cannot be opened and becomes unreadable. Consequently, the Trojan is often dubbed as Drive.bat shortcut virus.

Usually, the files corrupted by Drive.bat feature 1 KB size and seem to be completely lost. Luckily, analysis by NoVirus.uk^[2] experts have revealed that the virus does not delete the data, just hides it from the victim. The Trojan merely corrupts the display of data hierarchy.

Thus, you should remove Drive.bat to be able to re-access your files. This elimination process might be confusing for inexperienced computer users. We suggest using a reputable anti-malware software to eliminate the trojan.

Besides, the infected shortcut is designed to spread Drive.bat via connected systems, e.g. your computer and other external devices that might be connected to it. Many victims get lured into clicking it by thinking that it will lead them to the corrupted data. However, this act is precisely what attackers want them to believe. You should NOT open the shortcut under any circumstances.

Moreover, cybersecurity experts warn that this virus can start acting as a backdoor in the future. If these claims are true, it can be used for infecting systems with ransomware or other high-risk PC infections^[3].

Infected victims have already outlined their experience on a IT forums. It turns out that this cyber threat might block Windows Updates and anti-virus software (from both installing and launching) even when in Safe Mode. Besides, the Internet connection may also cause chaos by turning on and off unexpectedly. Obviously, to prevent these issues, you need to get rid of Drive.bat virus.

To take care of your system and prevent malware attack, we recommend employing a powerful security software. It will also help you to start Drive.bat removal instantly. You could use FortectIntego or SpyHunter 5Combo Cleaner since they will not only eliminate the trojan but also maintain your security in the future.

Drive.bat virus leaves a malicious shortcut after it finishes its job.

Be aware that eliminating the malicious program is not enough. You should make sure to follow the below-listed tips to avoid Drive.bat virus infection afterward:

• Keep your system protected by employing reputable anti-malware;
• Back up your files and valuable data;
• Do not open any suspicious e-mails or attachments sent by people or organizations you don’t know;
• Download applications only from authorized sources.

Find out how you can get infected with the file-hiding virus

Criminals aim to infiltrate trojans on as many computers as possible. Thus they use not one but many methods for distribution.

Drive.bat spreads via:

• Malicious drive.zip file;
• Spam e-mails containing a malicious attachment or link;
• Rogue advertisements displayed on highly suspicious websites;
• File-bundles of third-party apps that hide the information about the installation of the trojan;
• Illegal Torrent downloads.

Eliminate Drive.bat to retrieve access to your files

Trojans often are able to hide their presence or traces. Therefore, manual Drive.bat removal is almost an impossible challenge for those who do not possess specific IT skills. You shouldn’t try to get rid of the virus by yourself, or you risk damaging corrupted files permanently. Instead, pick a professional security software that will solve your question “How to remove Drive.bat from your system” with only one click.

There is a possibility that the malware will not allow you to download an anti-virus program. To avoid that, you should reboot your PC to Safe Mode. It will deactivate the virus and permit to run a full system scan.

Eliminate the main shortcut of the virus from external drive automatically

• Open My Computer or This PC and right-click on the external drive that is infected with a shortcut Trojan.
• Select Scan for viruses option.
• Select the security tool that you prefer using and let it scan the removable drive.
• Alternatively, you can open Windows Defender and access its Settings.
• Open the Advanced section and select Scan removable drives.
• Select the security tool

Get rid of shortcut Trojan from external drive using Command Prompt (Admin)

• Right-click on Windows key and select Command Prompt (Admin).
• You can also open Command Prompt (Admin) by typing cmd into the search. Right-click on the search result and select Run as Administrator.
• Now type the letter of your USB (e.g. E:) and press Enter.
• Type del *.lnk and press Enter.
• Once the command is executed, copy and paste the attrib -s -r -h *.* /s.d/l/ command. Press Enter to execute it.
• Now open the external drive and check whether the data was restored.