Endpoint Protection

In general, why are these USB flash key virus able to walk right past SAV?  When they do, SAV is powless to get rid of them.  The real time scanner will show a bunch of activity but reboots alwasy bring the virus back. I have seen this too many times.

 

Thanks  Bob

hmm - what virus have you seen?

Have you disabled autorun on your USB drivers?

Hi bob, this is because of the autorun.inf, the open command inside forwards you to the virus program. Please disable autorun on USB drives.

Btw, what is the virus name? Can you post risk logs?

See if you can find any hidden files in the flash drive. Use Explorer's "Folder Options" to be able to view any hidden and system/protected files. If you're prevented from doing that, better get ready to remove a virus.

You also want to check the Task Manager for the process Flashy.exe. kill it, delete the file, and then remove registry entries.

Paul, how can you be so sure that this is a Flashy.exe malware? Just curious.