Avast WEBforum

Other => General Topics => Topic started by: ehmen on April 24, 2015, 11:28:31 PM

Title: Can empty card be infected?
Post by: ehmen on April 24, 2015, 11:28:31 PM
Hi, is it possible for an empty SD card to be infected in any way?
Title: Re: Can empty card be infected?
Post by: Eddy on April 24, 2015, 11:30:33 PM
Is there anything in a empty bucket ?
Title: Re: Can empty card be infected?
Post by: ehmen on April 24, 2015, 11:38:49 PM
Is there anything in a empty bucket ?
Computers and devices differ in that they can contain hidden things, examples of which this great website is replete with, not so with a bucket.
Title: Re: Can empty card be infected?
Post by: Eddy on April 24, 2015, 11:45:27 PM
No they do not.
empty = empty
empty means there is nothing.

If something is hidden it means there is something.
Title: Re: Can empty card be infected?
Post by: ehmen on April 24, 2015, 11:53:25 PM
No they do not.
empty = empty
empty means there is nothing.

If something is hidden it means there is something.
Exactly, so if a card looks empty in that there's no files on it and "Properties" says it's empty, could there still be some kind of virus/infection/malware/whatever on it, which would make in reality not empty, though it seems that it is?
Title: Re: Can empty card be infected?
Post by: Pondus on April 24, 2015, 11:55:30 PM
Install MCShield   www.mcshield.net    when done, plug in the card and let mcshield scan it ... it will unhide hidden files and remove any infection

Title: Re: Can empty card be infected?
Post by: ehmen on April 25, 2015, 12:09:59 AM
There aren't actually any files (since hidden ones are visible, and there aren't any), I'm just wondering if there can be any infection without actual files.
Can MCShield detect that as well?

Thank you for your response.
Title: Re: Can empty card be infected?
Post by: Pondus on April 25, 2015, 12:31:20 AM
MCShields specialty is malware that use removable drives to spread. That is what it was made for
Search virus and worms forum section and see all the topics where Essexboy have saved the day using MCShield

He will be online tomorrow if you want his assistance

Title: Re: Can empty card be infected?
Post by: ehmen on April 25, 2015, 01:16:19 AM
Thank you.
Title: Re: Can empty card be infected?
Post by: Michael (alan1998) on April 25, 2015, 09:38:02 PM
There aren't actually any files (since hidden ones are visible, and there aren't any), I'm just wondering if there can be any infection without actual files.
Can MCShield detect that as well?

Thank you for your response.

There is 1 piece of malware that is fileless.

https://www.mysonicwall.com/sonicalert/searchresults.aspx?ev=article&id=761

Runs completely from the Windows Registry
Title: Re: Can empty card be infected?
Post by: DavidR on April 25, 2015, 10:54:54 PM
There aren't actually any files (since hidden ones are visible, and there aren't any), I'm just wondering if there can be any infection without actual files.
Can MCShield detect that as well?

Thank you for your response.

There is 1 piece of malware that is fileless.

https://www.mysonicwall.com/sonicalert/searchresults.aspx?ev=article&id=761

Runs completely from the Windows Registry

Whilst that may be correct, I don't see how it can be equated/related to an empty SD Card as that isn't the registry.
Title: Re: Can empty card be infected?
Post by: Chim on April 26, 2015, 03:16:49 PM
Okay, so say that I buy a Flash Drive and as soon as I take it out of the pack and plug it into my computer, I then format it so as to get rid of any pre-installed whatever might have come with it.  NOW ... just freshly formatted, won't it STILL have some sort of files in there for the Flash Drive to work?  Isn't that how it gets explained as to why you never get the actual GigaBytes available that the Flash Drive is supposed to have?

I'm just wondering, trying to confirm one way or the other.  I'm not trying to claim anything.
Title: Re: Can empty card be infected?
Post by: DavidR on April 26, 2015, 03:33:25 PM
The formatting of any drive results in the loss of some of the available space. Plus manufactures talk in a MegaByte (MB) as 1000 bytes and not its actual size 1024 bytes. When viewed in explorer, its size is shown correctly and less than the manufactures stated size.
Title: Re: Can empty card be infected?
Post by: Chim on April 26, 2015, 03:48:29 PM
So bottom line ... in the process of formatting, won't there be some files somewhere in there regardless of how small they might be?
Title: Re: Can empty card be infected?
Post by: DavidR on April 26, 2015, 04:06:48 PM
Well like a hard drive, presumably there would be a FAT table (file allocation table) to record where files are on the disk so they can be found and used. But that is a system style beast and not a file as such in the conventional sense.

Even after a format (Quick Format) of certain media data remains, but the space it took up is marked as available for use and there is no longer a record of that file in the FAT. There is software that can search for and recover data of a so called formatted disk.

Now that you question has you paranoid - the only true way to get rid of all of the data it to - either destroy the disk of run some super strength erasure software. It isn't actually erasing but doing multiple passes of writing random data over where the original data was. And that doesn't remove everything it just makes it much harder to recover it because of all of the random over writing it.

I bet you're glad you asked.

If you really want a scare try Google as the above is just my basic description/understanding.
Title: Re: Can empty card be infected?
Post by: REDACTED on April 26, 2015, 05:06:44 PM
Yes. It can infected. (Virus files can copy to the empty disk)
Before to infect it is empty. But after infected it is not empty any more.
Title: Re: Can empty card be infected?
Post by: DavidR on April 26, 2015, 05:19:56 PM
Yes. It can infected. (Virus files can copy to the empty disk)
Before to infect it is empty. But after infected it is not empty any more.


That is not what the theme of the topic, see Reply #4 from the OP and you can see the direction he is taking/asking about. Which is asking if a currently empty SD Card already be infected.
Title: Re: Can empty card be infected?
Post by: ehmen on April 26, 2015, 07:05:37 PM
...see Reply #4 from the OP and you can see the direction he is taking/asking about. Which is asking if a currently empty SD Card already be infected.
Right.
Meaning: though it looks totally empty to the user, is it possible that either it isn't totally empty and has some infection, or it's empty of files, but has something else (don't know what) on it that's an infection or infected?
Title: Re: Can empty card be infected?
Post by: Chim on April 26, 2015, 09:16:09 PM
 ;D  Hah Hah Hah!  No, David, I'm not any higher level of paranoid after my question.  I already knew since a couple years back that as you mentioned, just like in a Hard Drive's case, a Flash Drive is also NOT 100% permanently wiped out after being formatted.

Back then I had bought 2 Flash Drives and they turned out to be very short life lemons.  After the first one gave out, I contemplated sending it back to Amazon.com from where I bought it or to the manufacturer for my money back.  But, either there on some Amazon.com info or through Googling I found out about that info regarding no such thing as a 100% permanent wipe out.  So, I nixed the idea of sending my Flash Drives back to Amazon or to the manufacturer.

The only consolation was that I had bought them with a Gift Card I had won in a MyOpera Community contest.  So I hadn't per se lost money out of my pocket.

Anyway, so regarding this thread ... considering the above info, I figured there would just be no actual case of a 100% EMPTY Flash Drive.  I figured that unless that data written onto a Flash Drive for formatting purposes was somehow protected sort of in that method that a Factory Image partition in a Hard Drive is protected ... a supposed empty Flash Drive WOULD be susceptible to infection.

Well, flawed or not, that was my thinking.
Title: Re: Can empty card be infected?
Post by: DavidR on April 26, 2015, 09:53:33 PM
There was a time when there were some pre-installed malware on supposedly new drives. But these were also unlikely to be truly empty.
Title: Re: Can empty card be infected?
Post by: ehmen on April 27, 2015, 03:00:58 AM
Just wondering, how could MCShield scan my local C: Drive (with 135GB) in one second and claim there's no malware on it?
Title: Re: Can empty card be infected?
Post by: Pondus on April 27, 2015, 07:59:59 AM
Just wondering, how could MCShield scan my local C: Drive (with 135GB) in one second and claim there's no malware on it?
because MCShield only scan root of the drive, and only look for those types of infections (mostly worms)  that use removable drives to spread, the 135GB is a job for your antivirus to scan


if you want info about MCShield, read this topic (16 pages) i think evry question there is to ask is asked in that topic and answered by those who made/testet the tool
https://forum.avast.com/index.php?topic=104046.0

There is also lots of info on MCShield website
Title: Re: Can empty card be infected?
Post by: REDACTED on April 27, 2015, 11:05:23 AM
What do you think about code in boot sector (boot virus)?
Title: Re: Can empty card be infected?
Post by: Pondus on April 27, 2015, 01:01:05 PM
What do you think about code in boot sector (boot virus)?
Not related to this topic