Results 1 to 6 of 6
  1. #1
    New Lounger
    Join Date
    Oct 2010
    Location
    vicinity, spievang
    Posts
    14
    Thanks
    0
    Thanked 0 Times in 0 Posts

    USB stick infected?

    I had to have some documenst printed out in a photocopy/shop, and I brought USb memory stick with me.
    When I got back home, and tried to open USB i got the message form Antivira
    autorun.fx
    or something is blocked or denied

    Than I was warned that there is Trojan and that
    "bwlim.exe"
    or something (I can't remember it now)
    could not be found...

    I got som pop/up window and i checked erase what ever

    and now I can't open any document in USB / all I see are shortcuts/icons there.

    ...
    Bytheway, I ceated a Folder in USB with those files I needded to be printed, and the first thimg is that that Folder disappeared.
    My layman-guess is that this was infected in Photocopyshop.

    But, can I clean USb and recover the rest of files?

    *Pretty new USB and I used it only on my laptop and desk top PC, and a few photocopyshops.

  2. #2
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts
    (One of my USB hard drives got infected at a university in Taiwan. I had blocked applications from running from external drives, so luckily I didn't have any issues.)

    It sounds as though some of your files may have been quarantined by your AV software. Does the software give you a list of quarantined files? Or does it just erase them?

    I can't recall the extensions, but you probably want to remove or rename the ones that autorun/autoplay.

  3. #3
    New Lounger
    Join Date
    Oct 2010
    Location
    vicinity, spievang
    Posts
    14
    Thanks
    0
    Thanked 0 Times in 0 Posts
    When I was still in that photocopy shop, after they scanned piece of paper I wanted, and after they created a file on my USB, I couldn't wait to get home so I used public computer in that photocopy shop to send file via yahoo address.
    I remember good, that I ahd attached file with name "erklaering.pdf" or just erklaering.

    But... when I got gome and when I inserted USB into laptop, Av blocked - I guess put them i quarantine - file bhwipx.exe.
    That file is an alien, because I have no idea how did it get on my USB!

    And even more, I noticed only now that I had sent file named bhwpix.exe!

    I have no idea how it happened. I was convinced at the time in photocopyshop that I had sent file "erklaering".

    So, Av recommend me to block that exe file.

    I weas also asked if I want to get suspicious files erased, and I clicked YES.

    My question is::: can I recover USB at all, since I had many files on it, but now I cannot open any file, all I can see is "shortcuts" in USB.
    Is my y USB lost for good?

  4. #4
    New Lounger
    Join Date
    Oct 2010
    Location
    vicinity, spievang
    Posts
    14
    Thanks
    0
    Thanked 0 Times in 0 Posts
    and one more thing:

    I inserted same USB into another computer, that is my desk top (first time was on my laptop) and it hapenned the following:;
    I got immidiate message in pop-up window
    "SISTEM CAN TOT FIND bhwIpx.exe, please change he name or..." something
    and when I went to My Computer, I saw Folder icon instead of usb.removable device, and I could'nt open this "folder" either.

    First time somethung like that happened to me.

    Can any PC clinics clean USB for me?

    It seems that I can't even use FORMAT funktion on this infected USB stick.

  5. #5
    2 Star Lounger
    Join Date
    Dec 2009
    Location
    Calif
    Posts
    182
    Thanks
    0
    Thanked 14 Times in 13 Posts

    Lightbulb Flash Disinfector, etc

    Hi : I recommend you look into possibly using the FREE "Flash Disinfector", developed by a certified, Volunteer "Malware Removal Specialist" who goes by the Name of "suBs". See http://experi3nc3.wordpress.com/2007...fector-by-subs Would also look into the Panda USB Vaccine, available at http://www.pandasecurity.com/homeuse...ads/usbvaccine
    For the BEST in what counts in Life :

    http://www.ctftoronto.com

  6. #6
    WS Lounge VIP
    Join Date
    Dec 2009
    Location
    Earth
    Posts
    8,162
    Thanks
    47
    Thanked 976 Times in 906 Posts
    And turn off Autorun on all PCs!

    cheers, Paul

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •