OK, so it is a Flash Drive infection, so not only is it not surprising that it isn't being detected because it is relatively new, it's not surprising that AntiVir and others may not fix it. That is why there are specialty tools out there like Flash Drive Disinfector. This Flash Drive infection, like many others, creates a fake Recycle Bin folder and AV engines may err on the side of caution and not delete it because it looks legit. There also is apparently encryption involved and it probably uses other techniques that make it very difficult to remove. Malware is very sophisticated now, so it is advisable that you not fall into the trap of thinking that all you have to do is find the best Antivirus and that will guarantees that that every malware will be found and removed. Besides sophistcated techniques to avoid detection and removal, there are way too many malware out there and variations of the same for any one AV to be able to find and remove them all.
One variation of this malware was pretty much removed by Nod32 in a thread on another forum. But that doesn't necesarily mean Nod32 is a better AV. Say you switch to Nod32 because it can clean up this infection. What happens when you get another kind of infection that AntiVir can clean up and Nod32 can't. You get caught in a vicious circle.
The main point is that you should look first at getting this cleaned up and not at assigning blame for not cleaning it. In my opinion, you shouldn't trust any antivirus engine to clean this up completely. Instead use a forum that will use both automatic and manual tools to clean up and, more importantly, verify that all is clean. This is why these forums were created, so that new and hard to remove malware that antivirus and other scanners couldn't find or clean could be dealt with manually and in a public setting so that others could figure out how to do the same. In the end many malware definitions have been provided to AV vendors because of such forums--BC's is here:http://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-logs/
You should also try to submit samples of the files you suspect or know to be malware to Avira so they can update their definitions. To do that please visit the following page:http://analysis.avira.com/samples/index.php
1. Fill out the appropriate information.
2. By File Type
, make sure you have Suspicious File
selected. In future if you have a suspected false positive to submit, change this to Suspected False Positive
3. Disable AntiVir Guard.
4. Browse to the file or enter the file path.
5. Click Send then re-enable Guard when the upload is finished.
6. A preliminary report will appear after the upload is over and an email will be sent. The email basically states you will get results of analysis when it is ready.
7. Usually the next day a results email is sent.
If you are dissatisfied with the result or still have questions specific to AntiVir's handling of this malware, start a new topic in their support forum:http://forum.avira.com/wbb/index.php?page=Indexf8526059
Because you probably have an infected Flash Drive, to prevent this infection from spreading further, please run Flash_Disinfector. This is a special removal tool designed to remove just these types of infections. However, there are now so many of them that the author is no longer keeping it updated, so don't be surprised if the infection itself is not removed. But this tool will inoculate your system from future infections by disabling autorun and writing dummy autorun.inf folders on each partition. You will have to use My Computer/Windows Explorer to access files on your drives, but now at least such infections won't spread. Run on both affected systems, with any Flash Drives you have inserted.
Instructions for using FD can be found in the following post--I suggest you also read the entire thread for some more information: http://www.bleepingcomputer.com/forums/ind...t&p=1483381
Once that is done, please visit the following thread and follow all relevant instructions:http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/
Once you have your logs posted, post back here with a link and we will close this thread while you are in the process of getting cleaned up. If you have any questions, feel free to ask them now and before posting your logs--and please don't post logs in this topic.