I’ve been using Avast and this particular USB drive together for several months…
Today, as a complete surprise, once the USB drive was inserted into the PC, Avast alerted that…a "sign of “VBS:Solow” has been found in “F:\S3Update64.dll.vbs”, with F being the USB Drive letter…
I selected the option to delete the file
Now, when I try to access the USB drive, this error is displayed:
Deletion isn’t really a good first option (you have none left), ‘first do no harm’ don’t delete, send virus to the chest and investigate.
I’m surprised at the double file extension (.dll.vbs) s3update64.dll.vbs, not normal in a legit file, so this might well be a good detection and a google search on the file name seems to confirm this. So in the run command in the usb drive there is a command to run that file.
Insert your USB while you press Shift
Right click on it and select open or explore
If you see an autorun.inf delete it
If you don’t see it then enable “View hidden files and folders” (Tools → Folder Options → View) and delete autorun.inf
[*] Download Flash Drive Disinfector and save it to your desktop.
[*] Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
[*] The utility may ask you to insert your flash drive and/or other removable drives including your mobile phone. Please do so and allow the utility to clean up those drives as well.
[*] Wait until it has finished scanning and then exit the program.
[*] Reboot your computer when done.
[*] Note: Flash Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive plugged in when you ran it. Don’t delete this folder… it will help protect your drives from future infection.
