# Safe way to disinfect a memory stick?

**URL:** <https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113>\
**Category:** Factual Questions\
**Created:** [December 1, 2015, 3:08pm UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113 "2015-12-01T15:08:20Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hari\_Seldon](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/hari_seldon/32/5173_2.png) [@Hari\_Seldon](https://boards.straightdope.com/u/Hari_Seldon)\
**Post date:** [December 1, 2015, 3:08pm UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/1 "2015-12-01T15:08:20Z")

</div>

I was setting up a new computer and foolishly downloaded one of my favorite programs from a third party site instead of its home site. (Incidentally a google search for the program doesn’t even find the home site. If you go to its Wiki page, it’s there.) The downloaded file turned out to be infected. I used recovery to go back and start over. Since it was a virgin machine, nothing was lost except the 2 hours it had taken to download one of my programs. Everything worked fine until I put the memory stick (which contained initialization information for various programs) back and suddenly the machine was infected again. So I reformatted the stick, but I realized that the machine could have put the virus back into the reformatted stick. I went back to 0 on the computer and now it works fine, but I wonder about the stick. Is there a safe way of recovering it? Or should I just quit while I am ahead and toss it?

---

<div class="post-metadata">

**Author:** ![Telemark](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/telemark/32/372_2.png) [@Telemark](https://boards.straightdope.com/u/Telemark)\
**Post date:** [December 1, 2015, 4:12pm UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/2 "2015-12-01T16:12:49Z")

</div>

> [@Hari\_Seldon](#):
>
> Or should I just quit while I am ahead and toss it?

Unless this is a brand new 64 Gig thumb drive, just toss it. Not worth the hassle or worry.

---

<div class="post-metadata">

**Author:** ![engineer\_comp\_geek](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/engineer_comp_geek/32/504_2.png) [@engineer\_comp\_geek](https://boards.straightdope.com/u/engineer_comp_geek)\
**Post date:** [December 1, 2015, 4:25pm UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/3 "2015-12-01T16:25:30Z")

</div>

If you are comfortable with linux, you could create a bootable linux cd/dvd then use these instructions to wipe the drive. This is basically the nuke it from orbit option.

> <https://askubuntu.com/questions/185815/how-do-i-clear-everything-data-viruses-from-a-thumbdrive>

It would probably be a good idea to disconnect your computer’s hard drive from the motherboard while doing all of this stuff so that you don’t accidentally type the wrong thing and nuke your hard drive’s data instead.

If you’re not comfortable with linux, the extra money involved in tossing it and buying a new memory stick may be worth it compared to the effort required to learn enough linux to follow the above instructions.

---

<div class="post-metadata">

**Author:** ![OldGuy](https://avatars.discourse-cdn.com/v4/letter/o/3bc359/32.png) [@OldGuy](https://boards.straightdope.com/u/OldGuy)\
**Post date:** [December 1, 2015, 6:21pm UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/4 "2015-12-01T18:21:02Z")

</div>

Do you need linux? If it is a Windows virus couldn’t you just put the USB stick into an Apple computer and use an erasing utility that overwrites the entire memory times with random 1s and 0s? Or if it’s an Apple virus do this on a Windows machine?

It would be best to make sure auto-run isn’t enabled just to be safe.

---

<div class="post-metadata">

**Author:** ![Hari\_Seldon](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/hari_seldon/32/5173_2.png) [@Hari\_Seldon](https://boards.straightdope.com/u/Hari_Seldon)\
**Post date:** [December 1, 2015, 11:30pm UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/5 "2015-12-01T23:30:45Z")

</div>

Ah I could just ask my sysop who has Unix and Mac machines around to do it. If he doesn’t want to I will just junk it.

Recently read Reamde in which an infected memory stick started the whole thing. Too close for comfort.

---

<div class="post-metadata">

**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\
**Post date:** [December 2, 2015, 2:00am UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/6 "2015-12-02T02:00:38Z")

</div>

Mind if I piggyback here? I use a Mac, but I noticed recently that my thumb drive has a couple of .exe files and a .scr with random names, and that I know I didn’t put on it. Is it enough to just delete those files, or might there be something lurking deeper in the filesystem that I’d need to dig out? And would a PC be at risk just from putting the thumb drive in it, or would somebody need to be idiotic enough to run those executables?

---

<div class="post-metadata">

**Author:** ![Senegoid](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/senegoid/32/6606_2.png) [@Senegoid](https://boards.straightdope.com/u/Senegoid)\
**Post date:** [December 3, 2015, 1:51am UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/7 "2015-12-03T01:51:02Z")

</div>

Autoclave it?

---

<div class="post-metadata">

**Author:** ![snfaulkner](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/snfaulkner/32/433_2.png) [@snfaulkner](https://boards.straightdope.com/u/snfaulkner)\
**Post date:** [December 3, 2015, 2:27am UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/8 "2015-12-03T02:27:12Z")

</div>

> [@Senegoid](#):
>
> Autoclave it?

Nah. Irradiate it.

---

<div class="post-metadata">

**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\
**Post date:** [December 3, 2015, 4:02am UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/9 "2015-12-03T04:02:49Z")

</div>

Take off and nuke it from orbit. It’s the only way to be sure.

---

<div class="post-metadata">

**Author:** ![Inner\_Stickler](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/inner_stickler/32/318_2.png) [@Inner\_Stickler](https://boards.straightdope.com/u/Inner_Stickler)\
**Post date:** [December 3, 2015, 2:09pm UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/10 "2015-12-03T14:09:04Z")

</div>

> [@Chronos](#):
>
> Mind if I piggyback here? I use a Mac, but I noticed recently that my thumb drive has a couple of .exe files and a .scr with random names, and that I know I didn’t put on it. Is it enough to just delete those files, or might there be something lurking deeper in the filesystem that I’d need to dig out? And would a PC be at risk just from putting the thumb drive in it, or would somebody need to be idiotic enough to run those executables?

Well, if you delete them, use the thumb drive normally for a while and see them come back, then yeah, that’s an indication you have an infection somewhere. But I also know macs love to add all sorts of hidden files to thumb drives. Is it possible they’re just the .Trashes and fseventsd files all macs write to removable drives?

---

<div class="post-metadata">

**Author:** ![swampspruce](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/swampspruce/32/261_2.png) [@swampspruce](https://boards.straightdope.com/u/swampspruce)\
**Post date:** [December 3, 2015, 3:17pm UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/11 "2015-12-03T15:17:51Z")

</div>

Alcohol; isopropyl for the stick, 20 year old The Macallen for you.

---

<div class="post-metadata">

**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\
**Post date:** [December 3, 2015, 7:42pm UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/12 "2015-12-03T19:42:49Z")

</div>

> [@](#):
>
> Is it possible they’re just the .Trashes and fseventsd files all macs write to removable drives?

No, they don’t start with a . , as a Mac (or other Unix) hidden file would. They have random filenames, ending with .exe (for two of them) or .scr (for one). Both of which are extensions for Windows executables, but which are essentially unknown on Mac.

---

<div class="post-metadata">

**Author:** ![drewder](https://avatars.discourse-cdn.com/v4/letter/d/57b2e6/32.png) [@drewder](https://boards.straightdope.com/u/drewder)\
**Post date:** [December 3, 2015, 8:59pm UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/13 "2015-12-03T20:59:09Z")

</div>

> [@Hari\_Seldon](#):
>
> I was setting up a new computer and foolishly downloaded one of my favorite programs from a third party site instead of its home site. (Incidentally a google search for the program doesn’t even find the home site. If you go to its Wiki page, it’s there.) The downloaded file turned out to be infected. I used recovery to go back and start over. Since it was a virgin machine, nothing was lost except the 2 hours it had taken to download one of my programs. Everything worked fine until I put the memory stick (which contained initialization information for various programs) back and suddenly the machine was infected again. So I reformatted the stick, but I realized that the machine could have put the virus back into the reformatted stick. I went back to 0 on the computer and now it works fine, but I wonder about the stick. Is there a safe way of recovering it? Or should I just quit while I am ahead and toss it?

Here I was thinking you had dropped it in the toilet from the title. I don’t think saving the thing is worth the trouble and you’ll never know for sure. Just ask Iranian Nuclear Scientists… a Hammer might work well, magnesium fire, gunshots, or any other similar method.

---

<div class="post-metadata">

**Author:** ![OldGuy](https://avatars.discourse-cdn.com/v4/letter/o/3bc359/32.png) [@OldGuy](https://boards.straightdope.com/u/OldGuy)\
**Post date:** [December 3, 2015, 9:40pm UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/14 "2015-12-03T21:40:47Z")

</div>

> [@drewder](#):
>
> I don’t think saving the thing is worth the trouble and you’ll never know for sure.

No virus could withstand a reformatting could it? Or do USB sticks have a reserved portion of memory that is not subject to a reformat?

---

<div class="post-metadata">

**Author:** ![Hari\_Seldon](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/hari_seldon/32/5173_2.png) [@Hari\_Seldon](https://boards.straightdope.com/u/Hari_Seldon)\
**Post date:** [December 3, 2015, 11:28pm UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/15 "2015-12-03T23:28:33Z")

</div>

> [@OldGuy](#):
>
> No virus could withstand a reformatting could it? Or do USB sticks have a reserved portion of memory that is not subject to a reformat?

But reformatting it with an infected computer (which is what I did) might reinfect it. And I am not about to insert it into an uninfected computer just to reformat it again.

Sigh, I will just dump it.

---

<div class="post-metadata">

**Author:** ![Doug\_K](https://avatars.discourse-cdn.com/v4/letter/d/b5ac83/32.png) [@Doug\_K](https://boards.straightdope.com/u/Doug_K)\
**Post date:** [December 5, 2015, 6:03pm UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/16 "2015-12-05T18:03:25Z")

</div>

> [@Hari\_Seldon](#):
>
> But reformatting it with an infected computer (which is what I did) might reinfect it. And I am not about to insert it into an uninfected computer just to reformat it again.
> 
> Sigh, I will just dump it.

If you make sure autorun and autoplay are turned off, it’s perfectly safe to insert the drive. They’re (stupidly, in my opinion) turned on by default, and it’s always been one of the first things I change when setting up a new machine.

> **[How To Disable AutoRun / AutoPlay In Windows 7 & Windows 8 | Redmond Pie](https://www.redmondpie.com/how-to-disable-autorun-autoplay-in-windows-7-and-windows-8/)**
>
> As operating systems have evolved, their primary goal has always been to make computing easier for the end user, be it a tablet, a smartphone or a desktop computer. Thanks to hybrid operating systems like Windows 8, and the deep integration that...

---

<div class="post-metadata">

**Author:** ![BigT](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bigt/32/12044_2.png) [@BigT](https://boards.straightdope.com/u/BigT)\
**Post date:** [December 6, 2015, 9:40pm UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/17 "2015-12-06T21:40:17Z")

</div>

> [@Doug\_K](#):
>
> If you make sure autorun and autoplay are turned off, it’s perfectly safe to insert the drive. They’re (stupidly, in my opinion) turned on by default, and it’s always been one of the first things I change when setting up a new machine.
> 
> [How To Disable AutoRun / AutoPlay In Windows 7 & Windows 8 | Redmond Pie](http://www.redmondpie.com/how-to-disable-autorun-autoplay-in-windows-7-and-windows-8/)

It’s safe anyways, unless you do something stupid. Autorun doesn’t work like it used to. It just creates a menu entry for Autoplay. As long as you aren’t dumb enough to click that option, the file will not run. And, if you’re smart, you’ve already set up the default to be either Open Folder or Do Nothing.

Well, barring any hacking of the firmware, that is. That’s the new exploit talked about in the USB thread. It’s not appeared in the wild, but some security experts have designed thumb drives that will pretend to be some other device when you plug it in, allowing them to hijack your computer. And they left them lying around at a security conference, to see what would happen.

It’s extremely unlikely that this could happen to a drive by accident, though.

---

<div class="post-metadata">

**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\
**Post date:** [December 6, 2015, 10:53pm UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/18 "2015-12-06T22:53:45Z")

</div>

I am a little curious as to whether those firmware exploits can be modded on to an existing drive, or if they require custom hardware.

---

<div class="post-metadata">

**Author:** ![drewder](https://avatars.discourse-cdn.com/v4/letter/d/57b2e6/32.png) [@drewder](https://boards.straightdope.com/u/drewder)\
**Post date:** [December 8, 2015, 4:22pm UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/19 "2015-12-08T16:22:39Z")

</div>

you could of course go to best buy and plug it into one of their demo machines and format it from there.

---

<div class="post-metadata">

**Author:** ![Hari\_Seldon](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/hari_seldon/32/5173_2.png) [@Hari\_Seldon](https://boards.straightdope.com/u/Hari_Seldon)\
**Post date:** [December 9, 2015, 2:31am UTC](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113/20 "2015-12-09T02:31:47Z")

</div>

> [@drewder](#):
>
> you could of course go to best buy and plug it into one of their demo machines and format it from there.

I am not that evil, although I find the thought amusing.

[Next page](https://boards.straightdope.com/t/safe-way-to-disinfect-a-memory-stick/739113.md?page=2)
