USB Keys all say virus

Sumarokov

Honorable
Dec 15, 2013
3
0
10,510
After I printed a file out at a printer's shop, the USB key I had used started flashing up "virus" when I tried to use it again on my own computer.

I bought a brand new USB key ... and was told that this had a virus also! When I scan the USB key, I am told all is well, but this "virus alert" still springs up, making it unusable...

There would seem to be something transferred to my computer, which obviously acts on all USB keys. But at the same time no virus is there.... Can anyone tell me what to do to rid myself of this problem?
 

Major_Trouble

Distinguished
Jun 25, 2007
715
11
19,165
What AV solution are you using? I wouldn't trust certain ones for protection or to give reliable results during scanning.

You can download a few of the major ones as a trial version.

If you ever take files on USB to other parties you should make sure your key has a write protect ability. Saves a lot of headache.
 

Major_Trouble

Distinguished
Jun 25, 2007
715
11
19,165
Avast is pretty good. Re-reading your report you say you get a 'flashing up' virus notification. Is it Avast giving the report or some other piece of software. I find it strange there is notification yet when Avast scans it finds nothing. Something is scanning with a different engine or falsely reporting for some reason. Malware would do that to scare you into buying their product. Don't panic yet.
 

Sumarokov

Honorable
Dec 15, 2013
3
0
10,510
First of all the computer itself informs me that there is a problem with whatever USB key I introduce.

Then Avista springs up with its "virus" warning.

It states that the virus is VBS:agent-AXN [Trj]
 

Major_Trouble

Distinguished
Jun 25, 2007
715
11
19,165
Sounds like a trojan which you should really get rid of. The fact Avast can't get rid of it is a little disappointing. I guess you get what you pay for.

Go here and look at the instruction and see if they apply to you.
http://www.securelist.com/en/descriptions/Trojan-Downloader.VBS.Agent.aby

It's probably some derivative of the VBS.agent and would operate in the same way.

Also check your usb keys for a ???.vbs file and if you find one delete it. It may be a hidden file and it may reappear if it's now on your computer as well like you suspect. Avast should have stopped that happening really.

If there is an autorun.ini file on the keys open them in notepad and see what it's running. It will give you a clue to nasties.

Guess your print shop doesn't have very good AV either if it doesn't stop it spreading.