Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

What is this in my USBs when i plug them into my pc?


  • Please log in to reply
4 replies to this topic

#1 anthonynasr5

anthonynasr5

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:55 AM

Posted 22 April 2013 - 08:21 AM

One day I plugged my USB and I didn't find any of my files.
I went to "Tools >> Folder options >> View >> Show Hidden files and folders, unchecked the Hide extensions, Unchecked the Hide protected operating system files"
and here I see an Icon as my Drive (in other USBs as a folder) without any name or label.
 
I right click on the icon, I can't find any delete and if I click on "Properties" nothing shows up.
 
If I double click on it, it opens another window showing my USB files that were supposed to be directly in my USB.
 
Is there anything I can do to delete this virus from all my USB and external HDD I plugged into my pc and had the same problem.
 
I checked my pc for any viruses or something, it didn't show anything. I'm not sure if it's a virus or anything in my PC making this folder icon show or if it's from the USB drives i'm using, but as i used to plug all my usb before and never showed anything untill now any usb drive i put in my pc it does the same !!!
 
When i first plugged the USB on a different PC, the files were still inside this unnamed file so I copied the the file to another safe pc and i formated the USB and my External HDD, then i plugged them in the same PC and it showed nothing again.
 
When I re-plugged the usb drives to my pc, same problem showed again.
 
And i already tried two anti-virus and none of them showed a thing in my pc !!!
 
P.S. please find attached a photo showing how it shows
 
Thank you a lot

Attached Files



BC AdBot (Login to Remove)

 


#2 TwinHeadedEagle

TwinHeadedEagle

  • Security Colleague
  • 352 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Serbia
  • Local time:06:55 AM

Posted 22 April 2013 - 02:11 PM

Unplug USB

Download MCShield via following link --> http://mcshield.net/downloads.html

Install it, click on Scanner tab, and check Always unhide items of flash drives.

Click OK 

 

Now plug in USB, and wait until MCShield scan it. When it finish, press Start --> Run and type following

%AllUsersProfile%\MCShield\AllScans.txt

Then press OK.

 

Copy here content of that file.



#3 anthonynasr5

anthonynasr5
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:55 AM

Posted 22 April 2013 - 02:36 PM

here's the text file after scanning:

 

 

>>> MCShield AllScans.txt <<<
 
 
 
>>> MCShield ::Anti-Malware Tool:: v 2.6.3.21 / DB: 2013.4.21.2 / Windows Vista <<<
 
 
4/22/2013 10:28:36 PM > Drive C: - scan started (no label ~221 GB, NTFS HDD )...
 
 
 
=> The drive is clean.
 
 
4/22/2013 10:28:37 PM > Drive D: - scan started (HP_RECOVERY ~12 GB, NTFS HDD )...
 
 
 
=> Elevation of privileges...
 
 
4/22/2013 10:28:41 PM > Drive D: - scan started (HP_RECOVERY ~12 GB, NTFS HDD )...
 
 
>>> D:\$RECYCLE.BIN\protect.chinese hong kong - Malware > Deleted. (13.04.22. 22.28 protect.chinese hong kong.288830; MD5: 5855a7f748b34e6c79267a500be150c2)
 
>>> D:\$RECYCLE.BIN\protect.chinese simplified - Malware > Deleted. (13.04.22. 22.28 protect.chinese simplified.815757; MD5: b6ba95c18b883079b3658bd1bfc71972)
 
>>> D:\$RECYCLE.BIN\protect.chinese traditional - Malware > Deleted. (13.04.22. 22.28 protect.chinese traditional.205282; MD5: 5855a7f748b34e6c79267a500be150c2)
 
>>> D:\$RECYCLE.BIN\protect.czech - Malware > Deleted. (13.04.22. 22.28 protect.czech.941769; MD5: a8ff3bbea3e653b880947a7efead3bcf)
 
>>> D:\$RECYCLE.BIN\protect.danish - Malware > Deleted. (13.04.22. 22.28 protect.danish.162666; MD5: 7679b292927a39a23aeb62b8d743c75c)
 
>>> D:\$RECYCLE.BIN\protect.dutch - Malware > Deleted. (13.04.22. 22.28 protect.dutch.657232; MD5: 37d5f667bdfe7f560c213b231c891b77)
 
>>> D:\$RECYCLE.BIN\Protect.ed - Malware > Deleted. (13.04.22. 22.28 Protect.ed.2894; MD5: de9058fa006292bea84294dba5c06bf9)
 
>>> D:\$RECYCLE.BIN\protect.english - Malware > Deleted. (13.04.22. 22.28 protect.english.873898; MD5: 962d4db7be709ace9669ba7d8782af14)
 
>>> D:\$RECYCLE.BIN\protect.finnish - Malware > Deleted. (13.04.22. 22.28 protect.finnish.946372; MD5: d4ac6878b3ec66c1f7acd5d9b8fcdf8f)
 
>>> D:\$RECYCLE.BIN\protect.french - Malware > Deleted. (13.04.22. 22.28 protect.french.815102; MD5: 5b6a5d61c7eef7fcfd88ef8238fc4763)
 
>>> D:\$RECYCLE.BIN\protect.german - Malware > Deleted. (13.04.22. 22.28 protect.german.975956; MD5: c2db1dea30a918a25d842ba227d32d36)
 
>>> D:\$RECYCLE.BIN\protect.greek - Malware > Deleted. (13.04.22. 22.28 protect.greek.322755; MD5: 0909e5319c4257d5fd99325bed94f2c8)
 
>>> D:\$RECYCLE.BIN\protect.hebrew - Malware > Deleted. (13.04.22. 22.28 protect.hebrew.252665; MD5: 27d664d7e56958637b21b101baf24915)
 
>>> D:\$RECYCLE.BIN\protect.hungarian - Malware > Deleted. (13.04.22. 22.28 protect.hungarian.973189; MD5: 7d95c390ba552b1c220f2c45e43fdb7e)
 
>>> D:\$RECYCLE.BIN\protect.italian - Malware > Deleted. (13.04.22. 22.28 protect.italian.621339; MD5: b8dae96993953a364d1b8d1dd747fdf1)
 
>>> D:\$RECYCLE.BIN\protect.japanese - Malware > Deleted. (13.04.22. 22.28 protect.japanese.37408; MD5: 1a9d6765e7d5550953214bfb41ad98d6)
 
>>> D:\$RECYCLE.BIN\protect.korean - Malware > Deleted. (13.04.22. 22.28 protect.korean.287736; MD5: 3879788be1e1bed38934c67f9dbb8b52)
 
>>> D:\$RECYCLE.BIN\protect.norwegian - Malware > Deleted. (13.04.22. 22.28 protect.norwegian.373635; MD5: 1d9bee84937bce7f05c403654f444428)
 
>>> D:\$RECYCLE.BIN\protect.polish - Malware > Deleted. (13.04.22. 22.28 protect.polish.243502; MD5: 7a2d21b303d1e81c3a2b1893386198de)
 
>>> D:\$RECYCLE.BIN\protect.portuguese - Malware > Deleted. (13.04.22. 22.28 protect.portuguese.194753; MD5: db858bc6a48605649da255706cbde090)
 
>>> D:\$RECYCLE.BIN\protect.portuguese brazilian - Malware > Deleted. (13.04.22. 22.28 protect.portuguese brazilian.302517; MD5: 37a421a9e9aec83008adfd79794a8b06)
 
>>> D:\$RECYCLE.BIN\protect.russian - Malware > Deleted. (13.04.22. 22.28 protect.russian.152793; MD5: cda48e289e498fbd1abb5c8e6fbe7703)
 
>>> D:\$RECYCLE.BIN\protect.spanish - Malware > Deleted. (13.04.22. 22.28 protect.spanish.713218; MD5: f6e02a6a0803002b6c040f82d341fb37)
 
>>> D:\$RECYCLE.BIN\protect.swedish - Malware > Deleted. (13.04.22. 22.28 protect.swedish.733739; MD5: 0ad24c82f044e400aa4154aa19bda84e)
 
>>> D:\$RECYCLE.BIN\protect.turkish - Malware > Deleted. (13.04.22. 22.28 protect.turkish.492748; MD5: 23eec1323cd26332a278b848900aa494)
 
>>> D:\desktop.ini - Malware > Deleted. (13.04.22. 22.28 desktop.ini.841821; MD5: b12bf5e283b02e05f7d76b68caa07495)
 
 
=> Malicious files   : 26/26 deleted.
 
____________________________________________
 
::::: Scan duration: 2sec ::::::::::::::::::
____________________________________________
 
 
 
 
>>> MCShield ::Anti-Malware Tool:: v 2.6.3.21 / DB: 2013.4.21.2 / Windows Vista <<<
 
 
4/22/2013 10:30:09 PM > Drive F: - scan started (no label ~122 GB, NTFS HDD )...
 
 
 
=> The drive is clean.
 
 
 
 
 
>>> MCShield ::Anti-Malware Tool:: v 2.6.3.21 / DB: 2013.4.21.2 / Windows Vista <<<
 
 
4/22/2013 10:30:12 PM > Drive G: - scan started (Local Disk ~78 GB, NTFS HDD )...
 
 
 
=> The drive is clean.
 
 
 

What i understood from this scan that the usb drives F: and G: are both clean!! 

I checked again the file and still showing same unnamed file

now what to do ?

 

Thank you



#4 TwinHeadedEagle

TwinHeadedEagle

  • Security Colleague
  • 352 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Serbia
  • Local time:06:55 AM

Posted 22 April 2013 - 02:53 PM

Yes, both USB's are clean...

 

You can leave MCShield for the future use. It is handy little tool, that will automatically scan any USB you plug in. It is made by malware fighters and contain various tehniques for removing all sorts of malware that is spreading via removable drives.



#5 anthonynasr5

anthonynasr5
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:55 AM

Posted 22 April 2013 - 04:56 PM

Yes, both USB's are clean...

 

You can leave MCShield for the future use. It is handy little tool, that will automatically scan any USB you plug in. It is made by malware fighters and contain various tehniques for removing all sorts of malware that is spreading via removable drives.

 

alright, thanks a lot i'm sure it's a useful tool :) for sure i will keep it.

thank you again






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users