Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Immunizing portable HDD

30 May 2015   #1
gabe22

Windows 7 Home Premium, Version 6.1 (Build 7601: Service Pack 1)
 
 
Immunizing portable HDD

Hi

I just plugged in my porable HDD to another system today and after I connected it back to my system avast detected 50 viruses ".ink" type, as avast already caught the viruses so I'm not that worried but I would like to avoid similar situations in future as one may not be so lucky everytime.

Ofcourse I know I should be careful but sometimes you have to connect your devices to a system because you really need to/have to ....

Anyway I would like to know whats the best possible option to "Immunize my portable HDD" ... please advise.

Thanks in advance!


My System SpecsSystem Spec
.
30 May 2015   #2
MoxieMomma

OEM Windows 7 Ult (x64) SP1
 
 

Hi:

Perhaps Panda USB Vaccine

Cheers,
My System SpecsSystem Spec
30 May 2015   #3
gabe22

Windows 7 Home Premium, Version 6.1 (Build 7601: Service Pack 1)
 
 

I seems to be rather promising but what are the other options?

Also I was wondering if there is an way to make a certain portable storage device such as pen-drive or maybe a portable HDD with "Read-Only" mode .. for example if I'm transferring data on another system and I won't want to risk getting anything from that system, having a "Read-Only" mode and disabling write access alltogether somehow for that system or perhaps disabling write access for any system other than mine would probably help, thoughts?
Is it possible?
My System SpecsSystem Spec
.

30 May 2015   #4
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

.lnk files are generally shortcut files. My guess is that Avast read the zone identifier and quarantined them based on tat information which tells it that the files originated on another machine outside the "trusted security zone"

See: Question about Restore points and Open File Securiy Warning

And also:

Open File Security Warning - Enable or Disable

See image in Option One here for example of blocked .lnk (shortcut) file:

Open File - Security Warning : Unblock File

There are lots of tools to monitor and block files tat attempt to run when plugging in a usb drive:

10 Tools To Protect Computer From Infected USB Flash Drives - Hongkiat

Personally I don't use any of them as my security software takes care of it.

Immunizing portable HDD-voodooshield-settings.jpg


My System SpecsSystem Spec
30 May 2015   #5
gabe22

Windows 7 Home Premium, Version 6.1 (Build 7601: Service Pack 1)
 
 

@Callender

I think I understand what you said but maybe in this case thats not it(not sure .. i don't know much about security stuff lol) .. I'm just assuming based on the [trj] which is probably trojan .. detection in avast .. please see attached screenshot.

BTW Im thinking to get a new system with windows 8 probably and I'll be transferring number of files including .exe (applications), media files, web files (.php and other scripts etc) .. to the new system
And I had a possible rootkit infection on my system which used to create this/that files in public directory but avast seemed to detect them .. not the root of the issue(the file thats running the command to create this child-infected files within public directory) and I created the following post here: Possible rootkit infection? ... and ran number of scan/tests etc .. and somehow the issue stopped but none of the scans or anything really detected as in found the cause of the issue.
So basically I'm still a bit skeptical about transferring file from this system the new one and I have been wondering for a while if there is a way to make sure that once I have all the necessary data on my portable HDD, nothing fishy or malicious/infected is in there .. including rootkits etc(if any).


Attached Thumbnails
Immunizing portable HDD-ink-detection.jpg  
My System SpecsSystem Spec
30 May 2015   #6
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Your screenshot just appears to show a shortcut to a video file. Not the video itself but a shortcut to it. I'd say it's nothing to worry about and that it's a bug in Avast.

As for checking your files before transfer to another system - well get a properly configured AV with on access file scanning instlled on the new machine before moving files and aslo consider scanning your current machine with a rescue disk. Check out the entire video here for ideas and comparison of a few popular free tools.

Best Antivirus System Rescue Disk -

Other than that - please note that you'd probably get better help from one of the malware removal experts on this forum if you want to ensure that your machine is entirely clean.

Most experienced users here don't actually recommend Avast. I used it myself for a couple of years and had problems with missed detections and a high number of fasle positive detections. My rule of thumb is to only quarantine known malicious files that are detected and prompt the user for a decision on anyting else.
My System SpecsSystem Spec
30 May 2015   #7
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Re: External drive scan. It should be possible to scan it with any security software you've got onboard. You can use free tools like Emsisoft Emergency Kit or MalwareBytes to scan external drives:

Immunizing portable HDD-emsisoft-emergency-kit.jpg


My System SpecsSystem Spec
30 May 2015   #8
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Okay - looks like I'm wring about shortcuts. Check the Avast forum here and read a few posts down the page:

https://forum.avast.com/index.php?topic=52252.570

If you can upload any of those files to an online virus scanning service - see if you get the same detection.
My System SpecsSystem Spec
30 May 2015   #9
gabe22

Windows 7 Home Premium, Version 6.1 (Build 7601: Service Pack 1)
 
 

Thank you for your suggestions, I'm reviewing the best antivurs url .. will post back if I have any questions ...

About .ink issue, I wish I could but I don't know how to, I mean avast already detected them as possible trojan(I think) and quarantined them ... so how do I get access to the file without compromising system security and upload them to online scanning services such as virustotal?

And also I'm wondering .. assuming what you said is correct, so that avast detection is a link to the video file and perhaps we can assume its harmless but it wasn't there before I connected the portable HDD to the other system .. so it has to be something malicious(which creates shortcuts to files for no reason or whatsoever) right?

Also I ran avast quick scan/ malewarebytes scan with rootkit detection enabled on the portable HDD already and so far no detection(excluding the first 50 detection by avast on device connection), should I be concered about the HDD? I mean is is secured or perpahs you can suggest a few more scans using some other tools, just to be safe maybe .. please advise.
My System SpecsSystem Spec
30 May 2015   #10
gabe22

Windows 7 Home Premium, Version 6.1 (Build 7601: Service Pack 1)
 
 

Oh and I acutally created a post on avast forums after the rootkits auto genereated file detection continued randomly even after taking various secuirty measures ... https://forum.avast.com/index.php?topic=168033.0 , i followed almost all steps(except the "Dr.CureIt" as I could make up enough free time to run a scan that could take 12hour+ or more) they suggested and nothing fixed the issue, finally they suggesed that maybe something from online .. as in a website .. maybe a scirpt is creating those files in public direcroty .. I'm no security expert but I think that can't be the case(normally) .. probably because when malicious scripts from websites try to work it way on your system and if you have a decent AV .. it should detect and block the script right way .. and if worst case scenario .. a certain script is written in a way to bypass AV detection algorithm ... well then we're screwed really.
But I'm just assuming ...
My System SpecsSystem Spec
Reply

 Immunizing portable HDD




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Is a USB portable SSD viable?
I mean the speed that an SSD has is accessed through the SATA connexction, but having a portable SSD means using a ISB to connect, will the USB be a huge bottleneck, hugely slowing the transfere rate down?
Hardware & Devices
Are portable apps preferable, even for non-portable use ?
Some software publishers or authors offer both portable and installable versions of their products. (Kee Pass is one of them.) Is it advisable to systematically prefer the portable version, when running it from a fixed drive and not a thumb drive, according to the logic that if it's possible not...
Software
how to create a portable app?
I have an application that I want to make portable. It is free and I have. EXE for it. I also installed the PortableApps start and NSIS portable. I'm stuck in trying to create an application portable. I can not find any detailed instructions at all. I found bits and pieces here and there, but...
Virtualization
USB Win XP Portable
Has anybody make a successful Win XP Portable with a thumb drive? I have read many websites and "How To's" but to no avail... it is one of those things that I tell myself I must learn to do as it would make my life easier for those times when the computer has a virus or help a friend with a...
Installation & Setup
Immunizing Firefox with Spybot S&D
Since re-installing 7 ult x64 about two weeks ago (and, of course, along with it, all my applications), I've noticed that Spybot S&D no longer immunizes firefox (currently 3.6.2). When I update SS&D every Wednesday, and apply the new immunizations, it basically has to do all 13k of the items again...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 08:44.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App