Hello to all of you .This is my first time in this foroum .I work with avast a lot of years ago …and i think is a vary gooooood antivirus …
So before 10 minutes when i plug my kingston stick 2gb i saw a warning coming from my avast .I am using the anast 5 version the new one …
The name of the virus is siuvhx.exe found in an external usb stick .The virus is in the virus chest .
I search all the internet and i cant found any solution about this …IS this a new one (virus )
Please help me what to do …I must delete it …I must rescan with a bootable antivir
My machine is windows 7 64 bit ultimate …
dont worry the worm has been cleaned and go to the chest so may,it doesnt run so its ok.hey you may need to drink a glass of water ;D ;D
Thank God i see an English worse from my english
i know it is than
Well hardly a new one as avast has after all detected it.
You searched the internet for what, the file name ?
If so I doubt you would find anything as the file name looks like it is randomly generated (1 google hit in this topic, so to me that is also suspect when nothing is found).
So what do you know about the origin of this USB stick, e.g. has it been connected to any system that you don’t control ?
Did you know the file was there ?
Do you use the AutoIt program ?
You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can’t do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.
avast5 - Create a folder called Suspect in the C:\ drive. Now exclude that folder in the File System Shield, Expert Settings, Exclusions, Add, type (or copy and paste) C:\Suspect* That will stop the File System Shield scanning any file you put in that folder. Now enter the chest again and Extract the file to the Suspect folder and upload it to VT.
thanks for the quick answer guys …but please help me with the steps …
The stick was in my home …i have long time to use it .
I google this file and i cant find anything
I plug in my teachers laptop but the old avast 4 nothing found .I think i didnt have any file in the stick .
AutoIt program what is this …I disable the auto run in windows 7
can you tell me the easy steps to upload the file to the VirusTotal - Multi engine on-line virus scanne
is it safe to get out of the virus chest ?
sorry for my strange english but iam in pain …iam afraid of this suspicious virus
if only you have used this stick and no one else, then there shouldn’t have been anything on it that you didn’t place there that you aren’t aware of.
as I said not getting any hits on google is in itself suspicious and an indication that this is a randomly generated file name (again suspicious).
plugging it into an unknown system, teachers laptop or not leaves it liable to infection if you don’t know for sure it wasn’t infected. avast5’s detection methods are better than avast4, so this may account for that.
If you don’t know what AutoIt is then the detection is even more likely to be good, as AutoIt is commonly used by script kiddies to run malicious scripts.
it can do no harm in the chest, if you want to check it at virustotal, follow the steps I gave and it is safe to do that (just don’t execute the file).
hello man …i dodnt understand how to pull out the virus from the virus chest …IS it safe to delete it from virus chest .Maybe the virus leave some traces tin the usb ?
Is it a virus of usb ?an autostart virus ?
also the virus is on the stick .I must delete it from stick ?or i must rescanned to go again into the virus chest ?What to do …how to remove from usb and virus chest ?
When you had avast move it to the chest it should have been removed from the USB stick. So are you saying it is back on the stick ?
If so there is something restoring it and that may be on your system or if you are continuing to use it on systems which aren’t known to be clean. So uses these tools (see ~~~ below) to see if there isn’t something hidden or undetected on your system that is infecting the USB sticks.
You can delete the file in the suspect folder that you used to upload to VT as the results are pretty clear you don’t want that on your system. You can delete the copy in the chest, but no rush as it can do no harm there.
If you haven't already got this software (freeware), download, install, update and run it and report the findings (it should product a log file).
- 1. MalwareBytes Anti-Malware, On-Demand only in free version http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe, right click on the link and select Save As or Save File (As depending on your browser), save it to a location where you can find it easily later. - 2. [url=http://www.superantispyware.com][b]SUPERantispyware[/b][/url] On-Demand only in free version.
Don't worry about reported tracking cookies they are a minor issue and not one of security, allow SAS to deal with them though. - See http://en.wikipedia.org/wiki/HTTP_cookie.
The virus is in the virus chest .I also restore it to the usb stick
So we have 2 viruses one to the usb and second to the virus chest .
Which is the proper action to do .Only delete them ???
Why would you want to restore a suspect file to the stick where it could do some damage to other systems if activated ???
The avast detection was good as confirmed by the virustotal results, so deletion of all copies not in the chest (where it can do no harm, which is the whole point of sending it there) is the correct action.
Ultimately even the copy in the chest could be deleted as a) you don’t know of its origin and b) it isn’t a file that you have previously used and consider might be a false positive (not the case here).
i restored to usb to upload to the virus tolal …
I dodnt know what this worm is .So i must keep it in the virus chest ?
is there any chance I get infected ?
i do a full system scan .Can i scan with avast in safe mode ?
the result of the scan are
