Recently my PC in Mexico got infected by an annoying virus who replaces every file in usb with shortcuts. Avast can’t detect this thing, bypassed my Avast Internet Security. Im kinda annoyed because i tought Avast could protect me for everything, anyway i leave this.
I atacched the file Servieca.vbs anyway im uninstalling it manually. Even the famouse antivirys Bitdefender and avast can’t detect this thing.
All files on my usb are like this.
C:\Windows\system32\cmd.exe /c start Servieca.vbs&start mumble-1.2.3a.msi & exit
Malwarebytes, Kaspersky, Bitdefender detects nothing even adwcleaner 2.0 show my pc as clean.
Im scared of put my usb on my pc because this virus can back.
Break that second link as hxtp pr wXw, so the unaware wont click through, please.
Quttera flagged this as potentionally suspicious file:
/js/master_85930.js
File size[byte]:
553962
Severity:
Potentially Suspicious
Details:
Detected procedure that is commonly used in suspicious activity.
Reason:
Too low entropy detected in string ‘undefined|undefined|undefined|undefined|undefined|undefined|undefined|undefined|undefined|undefined|’ of length 5119 which may points to obfuscation or shellcode.
MD5:
4E6D0946F43611FAEE3F6E62D42CBB0A
Quttera scan results
@ gasparmx
I don’t believe the link should be broken, it should be completely removed.
Samples should be sent directly to avast not hosted on a file sharing site where you have no control over who can download it or what they might do with it.
It has already been sent to the avast labs, so that mediafire link can now be removed completely.
Better to remove that link alltogether, as these should be send directly to virus AT avast dot com. Always remember that malcreants look over our shoulder here as well,
This is a new type of infection. MCShield is a program that will prevent and disinfect any infection that comes with a USB device.
Although he has able to see, disinfect and remove this malware (due to MCShield detecting heur. routines) these days MCShield has been fully optimized for this type of malware.
Download MCShield from one of the following links:
[*] Double click MCShield-Setup to install the application.
[*] Wait a few seconds to MCShield finish initial scan.
Recommendation to under General and Scanner tab you click on Defaults button to choose recommended options.
[*] Connect your USB storage devices to the computer one at a time. Scanning will be done automatically.
When all scanning is done, you need to attach a logreport that has made MCShield.
Start → All Programs → MCShield → Logs
Attach here → AllScans.txt
Explanation: USB storage devices are all the USB devices that get their own partition letter at connecting to the PC,
e.g. flash drives (thumb/pen drives, USB sticks), external HDDs, MP3/MP4 players, digital cameras,
memory cards (SD cards, Sony Memory Stick, MultiMedia Cards etc.), some mobile phones, some GPS navigation devices etc.
It would be good to check OS for malware. Read these instructions for running AdwCleaner, OTL and aswMBR tool and attach here their reports for review. http://forum.avast.com/index.php?topic=53253.0
