Moments of Permanence -

From: shiningmoon.livejournal.com Date: March 10th, 2009 12:28 pm (UTC) (Link)

Since there are a variety of new threats that spread using autorun.inf, it could be you, or it could be the library & uni. It's possible that one program has detections for one part of it, and the other has different detections. Some threats also prevent AV software from being installed.

Please to see my post on preventing the spread of this crap thru autorun/autoplay (http://shiningmoon.livejournal.com/590821.html). Sadly don't know how do to a full system scan on that program, but we always recommend doing it in Safe Mode to ensure nothing viral is running (most things can't load in Safe Mode).

There's also the Symantec Security Check (http://securitycheck.symantec.com) (an online scanner), which can't remove anything, but it can at least tell you if you have something. FWIW.

Good luck, hon. (And I have been following along in your recent posts.) *hugs*

(Reply) (Thread)

From: shiningmoon.livejournal.com Date: March 10th, 2009 12:50 pm (UTC) (Link)

I just realized I read your post wrong. I bet the library's computer was infected, tried to spread through your thumb drive, and subsequent computers picked up the infected bits. Won't hurt to do a scan, for sure.

(Reply) (Parent) (Thread)

From: tevriel.livejournal.com Date: March 10th, 2009 01:23 pm (UTC) (Link)

Yeah, that is what I was getting at. :) Twice I've had my antivirus software be all OH HELL NO at thumb drives that have been in that library computer, I was just getting paranoid about things in case it had missed something.

There's no autorun.inf in my c:\, and I just did what you said with the folder thing.

I suspect it's fine - the first time I put a library-computer-infected thumb drive in my computer was last week, and I only had any problems at all today, and that could well be because sometimes my computer confuses itself a bit (especially when hibernating) if it's running on low-power mode.

(Reply) (Parent)

From: tevriel.livejournal.com Date: March 10th, 2009 01:19 pm (UTC) (Link)

I might try it. I installed Avast just fine, though, and a full boot scan (which scanned the entire system without loading the OS at all) turned up nothing.

So my computer is clean by two different antivirus programs. Given that a virus check run locally on my really-quite-fast computer takes a VERY LONG TIME, I'm not sure I'd want to do one via the internet. I'm going to do a full scan while running overnight, just in case, and then I think I'll just try and relax.

I know that some virus programs detect the non-viral drivers/other system files on flash drives as viruses (has happened to a friend of mine), so it's entirely possible it was just Sophos being odd, but I wanted to be as sure as possible. (Next up, of course, using the flash drive again and then trying it in a library computer again.)

Where this gets mildly problematic is my acquired discomfort with sticking a thumb drive into a State Library computer again. I'm done with *that* computer, but I'm not sure I trust the other ones...

(Reply) (Parent)