Flash drive

Discussion in 'ESET NOD32 Antivirus' started by linkot, Aug 24, 2010.

Thread Status:
Not open for further replies.
  1. linkot

    linkot Registered Member

    Joined:
    Aug 25, 2009
    Posts:
    20
    I understand USB Flash drives are prone to virus and malware attacks.

    I run ESET NOD32 Antivirus Version 4.0.737.0 and Malwarebytes (not simultaneously) on my desktop PC. Is there a Flash drive brand that is less vulnerable or better than the rest? Do I need to install a portable antivirus right on the Flash drive ... or can I rest assured that I'm safe if before I open the Flash drive I right click and scan it with ESET and Malwarebytes?

    Any information, suggestions will be appreciated.

    Thanks,
    LinK
     
    Last edited: Aug 24, 2010
  2. Hollowstriker

    Hollowstriker Registered Member

    Joined:
    Mar 28, 2010
    Posts:
    50
    It's quite possible that both NOD32 and Malwarebytes can miss the malware on your flash drive if it is of a new variant that is not yet detected by signatures or heuristics.

    Some possible fixes that I have used and found to be useful are:

    1. Disable autorun on Windows - https://www.us-cert.gov/cas/techalerts/TA09-020A.html

    2. Disable autorun on a specific thumbdrive - https://www.blogger.com/comment.g?blogID=7890764972166411105&postID=705842778193223258&isPopup=true (scroll down/search for the post by kOuD3LkA on 6 March 2009)

    If you use both of these fixes, you should be quite safe from any malware that may have been copied from other computers onto your thumbdrive. Note that it only prevents the automatic infection of your computer when you plug in the thumbdrive, but it won't prevent infection if you manually run the virus executable on your thumbdrive itself (e.g double-clicking G:\malicious.exe) - don't run any executable from your thumbdrive if you aren't sure what it is.

    Additionally, if you find any suspicious executables, you can upload them to https://www.virustotal.com for a second opinion whether it is a virus or otherwise.
     
  3. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    If you are concerned of removable media infecting your machine your may block the drive, if the drive is used often, ensure your scanning targets include the drive, so that when an on-demand scan or scheduled scan is run, the drive is included in the scan.

    You also have the right-click dialogue option of scanning the contents of the drive whenever it is inserted.
     
  4. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    I'd suggest upgrading to the lastest version 4.2.64. Version 4.2 introduced a new feature of scanning files executed from removable media with maximum settings (ie. advanced heuristics and runtime packers enabled).
     
  5. linkot

    linkot Registered Member

    Joined:
    Aug 25, 2009
    Posts:
    20
    Many thanks ... I'm downloading the update now.
     
    Last edited: Aug 25, 2010
  6. jimwillsher

    jimwillsher Registered Member

    Joined:
    Mar 4, 2009
    Posts:
    668
    42 is a free upgrade and you just install it over the top (or uninstall then reinstall, your preference).


    Jim
     
  7. linkot

    linkot Registered Member

    Joined:
    Aug 25, 2009
    Posts:
    20
    Thanks Jim. I tried but needed to open a support ticket with eset! The installation didn't go well and the computer froze during the needed shut down. I had to do a hard shut down! Then on start up it went into repair mode and auto repair needed to use system restore. The file I downloded to the desktop is gone ... but at least my computer starts up. I'm upset and disappointed with eset.

    Wonder too, as everyday eset updates, how I was able to miss such a major update?

    Thanks for helping
     
    Last edited: Aug 25, 2010
  8. linkot

    linkot Registered Member

    Joined:
    Aug 25, 2009
    Posts:
    20
    I just received email from eset (fast response) ... the program needs to be uninstalled before the update is run. I think that's the answer to my issue. I'll wait for another reply before I try this again.
     
  9. jimwillsher

    jimwillsher Registered Member

    Joined:
    Mar 4, 2009
    Posts:
    668
    I think ESET always say that it should be uninsatlled, but I've never found that to be the case. However all systems are different and it's probably "best practice" to do so.
     
  10. linkot

    linkot Registered Member

    Joined:
    Aug 25, 2009
    Posts:
    20
    Thanks Jim for the information you provided ... it got me on course. Using safe mode I uninstalled and then deleted the ESET folder ... and I was able to get a clean install. My pc seems to be running good even after the morning scare.

    All is well that ends well.

    Thanks again!
    LinK
     
Thread Status:
Not open for further replies.