system
41
McShield is great. I have installed it everywhere. It protects a PC from malware coming from the USB Drive.
But how could one protect the USB Drive from malware on the PC?
For example if I plug my USB Drive into an infected PC of somebody and then take it to another not infected PC of somebody else I am infecting it. 
Pondus
42
For example if I plug my USB Drive into an infected PC of somebody and then take it to another not infected PC of somebody else I am infecting it.
Plug it in to a computer with MCShield first or install MCShield before you plug in the USB drive
Note that MCShield only target those type of malware that use removable drives to spread, so to detect other types you need to scan it with your antivirus
Let’s use a second opinion scanner for one last check (but the FRST logs don’t show anything major)…
Go to Emsisoft and download the Emsisoft Free Emergency Kit from here.
- Double click on the EmsisoftEmergencyKit.exe file and then click on Extract to unpack the files (the default directory of C:\EEK is fine).
- Go to the new directory and right click on Start Emergency Kit Scanner.exe and choose 'Run as Administrator'.
- Once the scanner loads, click on 1.Update to check for and load the current updates.
- When the updates are finished, click on Malware Scan in the 2. Scan box.
- Please enable the PUP detection option. (The Kit may ask about this after it is loading updates or right when the scan starts; it will only ask once, so enable it when the Kit asks.)
- If the scan finds anything, it will open a scan finding window. Please click on View Report; copy this report and paste it here in reply post.
- Please close the Emergency Kit Scanner program now.
system
44
Here it is, the EEK Scan Report for PC3:
Emsisoft Emergency Kit - Version 12.0
Last update: 25.02.2017 16:08:04
User account: DESKTOP-HUINQM3\hp
Computer name: DESKTOP-HUINQM3
OS version: Windows 10x64
Scan settings:
Scan type: Custom Scan
Objects: Rootkits, Memory, Traces, C:, D:\
Detect PUPs: On
Scan archives: On
ADS Scan: On
File extension filter: Off
Direct disk access: Off
Scan start: 25.02.2017 16:10:08
C:\ORIS\ExcellToXml.exe detected: Gen:Trojan.Heur.VP2.cm0@aCs4jkii (B) [krnl.xmd]
C:\Program Files (x86)\IncrediMail\Bin\AE\aeldr.exe detected: Application.AdConnect (A) [285718]
Scanned 246160
Found 2
Scan end: 25.02.2017 16:56:46
Scan time: 0:46:38
system
45
I think the Gen:Trojan.Heur.VP2.cm0@aCs4jkii is FP. It was in a folder of our accounting software. I think it is part of the software. It is an old file created in year 2015. I have checked it with VT. Here is the link:
https://virustotal.com/en/file/97d042df98339a28a35c13c1bc6de4d53e84a0176ede8b06955f1b65b8051468/analysis/1488025095/
That scan is still pretty clean. What about the aeldr.exe file? Did you test it at VT?
Eddy
47
Hmm is (or was) incredimail installed ?
system
48
No I forgot to test it with VT. I just moved it to quarantine.
And the other file - "ExcellToXml.exe ", I have not deleted it. It is still there.
Yes. Incredimail is installed on this PC. My mother in law uses it for email. This software is simillar to Outlook as I know. Can this software harm the PC?
Do you have the VirusTotal link for the Incredimail file? Best I can tell is that the application uses ads to support the company but that does not mean anything malicious is going on.
system
50
That file is fine. I would say your system (or your Mom’s system, in this case) is good to go. Is the AV scanning correctly?
system
52
Once we visit her I try to scan whole PC with Avast AV.
One question. Can you reccomend me some encryption tool to protect my USB Flash Drive? I have to use Flash Drive on different PCs and some of them may have viruses. I already have McShield on my PC, but I can not install it on PCs of all the people I have to work with.
Pondus
53
I have to use Flash Drive on different PCs and some of them may have viruses.
MCShield will protect[b] your[/b] computer / flash drive
Other users need to install it on there computers if they want protection against malware that use USB drive to spread
system
54
I can recommend it to people I know well, but when I see a person first time in my life - it’s difficult.
Pondus
55
If you after using your flash drive in another computer see your MCShield detect and clean when you plug it in your computer, you should tell them that they have a infected computer and recomend MCShield 
IMHO mcshield should be installed on all scool, hotel, printshop, internet cafe, computers. It would save them fore lots of trouble
system
56
If the Malware encrypts files (making them inaccessible) on my USB Flash Drive I plug into an infected PC of somebody, MchShield (on my PC) will not help.
Pondus
57
Correct, MCShield is not a antivirus and does not detect ransomware, it only detect those malwaretypes that use removable drives to spread
For ransomware protection you should always have backup of your file(s)
system
58
I have uploaded the volumeInformation.exe (the file I have mentioned in the title of the tread) to VT again. Just to see how many Antiviruses recognise it. Vt says only 28 of 58 recognized it. Kaspersky has disappointed me. 
https://www.virustotal.com/en/file/0e239235388c2c6d015c942dd66acf46580d897041bf218cb3a7a136c733eee8/analysis/1488432035/
