Malware not found by Anttivirus

[joesm]

Dears,

I use Kaspersky and Eset antivirus.
Lately, several of my USBs have been infected where all their content became shortcuts.
I scanned with my antivirus, no infection showed.
I did a small online research and discovered usbfix which I downloaded and cleaned both my computers and USBs.

I need to know how to protect my computers from such infections when antiviruses aren't able to discover that type of infections?

Thank you

 

[richc46]

If you use the free sandiebox, your threat of a virus is greatly reduced. The only way to have a guarantee of no virus is to stay offline.

 

[ignatzatsonic]

The standard recommendation would be an anti-malware application such as Malwarebytes from Malwarebytes.org.

To keep bad stuff from entering your PC, you'd need the "Premium" version, which has an annual subscription fee of about $25.

And you can periodically do scans with other tools, such as Emisoft Emergency Kit.

Plus review your PC habits--what websites you go to, etc.

Not sure you need both Kaspersky and Eset. They might conflict with each other?

 

[Layback Bear]

You should not have two active anti virus programs on one computer at the same time.

Anti virus programs are just that anti virus programs not anti malware programs.
Anti malware programs are use to fight malware.

I'm trying to understand what a infected usb port is.

Do you mean things that you plug into a usb port are infected? Usb flash drives or hard drives. Could you explain.

 

[whs]

A really thorough scan of files can be done with Virus Total. I do my downloads in a virtual Linux machine and check the download with Virus Total before I put them on my Windows host system. That way I am sure they are clean and Linux is anyhow immune to the Windows malware.

 

[cottonball]

joesm,

To immunize the removable media, like USB pen drives and external hard drives...
Consider using the Vaccinate option of UsbFix:

Download UsbFix

Press: Download UsbFix Windows Installer...etc.

Next, please, temporarily disable your antivirus software so it does not interfere with the running of USBFix.

Now, right-click the downloaded USBFix file and select: Run as Administrator

Connect the external media to your PC, turn on (if powered), but, do not open any of the connected devices.

At the main console of USBFix, press: Vaccinate


:info: To check if the immunization was effective, you can do the following...

Enable the viewing of hidden and protected system files in Windows 7:
Close all programs so that you are at your Desktop.
Click on the Start button (globe).
Click on the Control Panel menu option.
Click on: Folder Options

Under Folder Options, click on: Show hidden files and folders
Under the Hidden files and folders section select the radio button labeled: Show hidden files, folders, and drives.
Remove the checkmark from the checkbox labeled: Hide extensions for known file types.
Remove the checkmark from the checkbox labeled: Hide protected operating system files (Recommended).
Press the Apply button and then OK.

The folder is hidden, but, you can now do a search for X:/Autorun.inf (X = the letter of the USB drive)
Right-click the file above to open it, and you will find:
lpt1.UsbFix

lpt1 cannot be deleted or renamed.

Please go back to viewing hidden files and folders, and re-enable the following:
Hide extensions for known file types
Hide protected operating system files (Recommended)

 

[Layback Bear]

Thank you cottonball for coming to help.

This USBFix is new to me.

I will just sit back and watch.

 

[PetersonJohn]

Security of the your computer from malware attack, use anti-malware removal tool.

 

[Borg 386]

I've immunized all my flash drives. Call me old fashioned, but when I'm fixing someones PC, I still prefer, if possible, to put the malware scanners on a CDR & load them on the infected PC that way. They're cheap & I know that there's no way the infection is going to jump to the CDR. Yes, even though the FD's are immunized, why take chances.

 

[joesm]

Dears,

Just a clarification; I don't use kaskerpsky and eset on the same machine; i mean, tht I used both and still some of my PCs were infected where only USBfix cleaned them.

I wish to thank you all for your reply; you were really of help.

 

[ThrashZone]

UsbFix terms are written in French
Hard to agree too

 

[aritra2116]

From your post, I assume you might be infected by Gamarue. Maybe these links could help.

WORM_GAMARUE.DA - Threat Encyclopedia - Trend Micro USA
Win32/Gamarue

Always ask Cottonball first before doing anything. He is way more experienced than me. You can also run a scan with MSE. It detects Gamarue and its variants.

 

[aritra2116]

SpyHunter, as I've experienced it is a rogue. Use MalwareBytes for any malware removal. Don't use tools from untrusted third-party sources. Google is your friend.

 

[ThrashZone]

Someone might say the same thing about any TrendMicro products,
Oops I just did