Immunizing portable HDD

"Win32/Autoit.JW worm----> "D:\Skypee\googleupdate.a3x"

Read about the 'worm' and where it might be possible to find it:
WORM_IPPEDO.B - Threat Encyclopedia - Trend Micro USA

GokAy said:

Moxie, my post wasn't in reply to you, I should have quoted the OP. And that's some detailed information about MBAM. Much appreciated. Not finding some infections, I took from the support page.

No problem, GokAy.:)
No offense was taken or intended.

As a bit of a stickler for details, I was just trying to clarify matters for anyone reading this thread.
We very often see folks at the MBAM forum who mistakenly assume MBAM is an AV.
I tried to explain in a bit more detail WHY it is not an AV or substitute for one.

As one can see even from a few replies to the poll here, there are users who unwisely rely on ONLY MBAM Premium or even MBAM Free (!!) to protect their system.
So it was good that you pointed out the helpdesk KB article.

Ennywho, I tried to answer the OP's original question about immunizing his external UHD here and here.:)
As the topic has drifted a bit to malware cleanup and "best security strategies", I will likely just monitor the thread from this point.

Okay so we know where to find it. Do you still have UVK installed and are you able to upload scan results?

If you want to try that also state Drive Letters for all currently connected drives.

UVK Settings needed:

Note: Add .a3x file extension to list of exectutables to be scanned and change the number of days to whatever you think it needs to be (number of days before infection)

Also add drive letters to custom scan settings as shown.

Also add the domains www.geoplugin.net and geoplugin.net to your hosts file!

Re: Your screenshots.

You can probably delete that unreadable file extension as the characters are gibberish.
It's detected Avast virus definitions - no need to worry about those.
The Games one (EOS) - probably detected as adware - up to you if you want to remove it.
Wordpress entry - no idea on that one.
Disabled UAC - really should be enabled unless you've got software that performs the same function. Also it#s not set to it's highest level by default in Windows 7.
Modified Hosts. Nothing to worry about as I know you add your own entries. All you really need to do is check those entries yourself and check that there are no re-directs in place.

Re: Emsisoft results. Just worry about the high risk items and remove those.

Re: UAC.

User Account Control - UAC - Change Notification Settings

It should be on highest level and that way malware can't change important system files without you noticing although some .alware is probably designed to get around this.

If you turned off UAC because of the prompts when you run a program - it's possible to create elevated shortcuts to run trusted programs without a UAC prompt getting in the way;