Author Topic: USB Memory Stick Virus or Legit Install Software?  (Read 17491 times)

0 Members and 1 Guest are viewing this topic.

Avastfan1

  • Guest
USB Memory Stick Virus or Legit Install Software?
« on: March 07, 2009, 08:18:04 PM »
Dear Forum Gurus,

Could somebody please advise how to ascertain whether I have a virus or installed legitimate software?

Is it usual for new USB memory sticks, once plugged in, to install software to be able to read them?

I had a lapse in judgement and after plugging a new USB memory stick into my laptop a grey box appeared. It stated something like 'This USB stick requires the installation of additional software to be used'.

To be honest I was extremely tired and stressed and clicked yes. I don't remember exactly the process but it installed (no boxes appeared or anything). Can't remember if it needed a reboot but I was able to read the stick afterwards.

My computer appears to be functioning completely normal. No slow down in speed, strange messages or crashes. I checked C:\ and there was no autorun.inf file there. I even changed the setting to 'show system files' and 'don't blend hidden files out' in Window$ Explorer.

In hindsight it was stupid of me. I am now worried that I have installed malware, spyware or something else bad.

I run Avast Pro, MBAM resident, ZA Pro, SAS on demand, Window$ XP SP3.

There were no warnings from Avast. My regular scans of Avast, MBAM and SAS have detected nothing. A HJT log posted to the www.hijackthis.de website didn't show any malicious items.

I would be really grateful for you comments, thoughts and suggestions.

Many thanks,

Avastfan1

Offline Confused Computer User

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 700
  • The answer is 42
Re: USB Memory Stick Virus or Legit Install Software?
« Reply #1 on: March 07, 2009, 08:45:10 PM »
Quote
Is it usual for new USB memory sticks, once plugged in, to install software to be able to read them?

Speaking from experience with my own USB stick, Yes. Every Computer I plug it in (supposing it wasn't pluged in that computer before) does the same routine automatically without any input from me. I see it in on the right side of the Taskbar where I get a notification that new hardware is being installed. I've only noticed this in Windows Vista and XP. I used the same stick in Linux and got no notification (maybe it's a difference of OS, who knows)

Cheers
Computer Systems:

Intel Pentium 4 641 / 2GB RAM / Vista Home Basic SP2 / avast! 5.0 Home / SAS Free / MBAM Free / Windows Defender / Windows Firewall / Spyware Blaster/ Secunia PSI / Firefox 3.6 / Opera 10.5

Core2Duo T8300 / 4GB RAM / Vista Home Premium SP2 (32 bit version) / Same Software.

Avastfan1

  • Guest
Re: USB Memory Stick Virus or Legit Install Software?
« Reply #2 on: March 07, 2009, 08:51:48 PM »
Hi Confused Computer User,

Firstly, thanks for your response. I too am used to the automatic Window$ response to a new USB stick. Specifically, the yellow bubbles that pop up from the taskbar saying 'USB XX found' which end with 'USB stick ready to use'.

The case I mentioned in my first post didn't follow the same procedure. Instead of the yellow bubbles from the task bar a regular grey box (window) appeared. The text stated something to the effect 'the usb stick needs to install additional software for use'.

This is why I am worried. Have you ever had the grey box appear rather than the yellow bubbles?

I am using Window$ XP SP3.

Thanks for your help. I keenly await your (and others) answer.

Avastfan1

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: USB Memory Stick Virus or Legit Install Software?
« Reply #3 on: March 07, 2009, 09:04:05 PM »
Quote
The text stated something to the effect 'the usb stick needs to install additional software for use'.
Most like a new driver needed to be installed for that USB. Not unusual and not something to get paranoid about IMHO.  :)
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Avastfan1

  • Guest
Re: USB Memory Stick Virus or Legit Install Software?
« Reply #4 on: March 07, 2009, 09:07:55 PM »
Hi Bob3160,

Thank you for your response. I am starting to feel a little more relaxed. :-)

Stupid question but where is the driver installed from? The USB stick itself?

Is there a way I can check whether it was a legitimate driver? Is there an installation log? Is there a Window$ file or directory I can check?

Thanks,

Avastfan1

Offline Confused Computer User

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 700
  • The answer is 42
Re: USB Memory Stick Virus or Legit Install Software?
« Reply #5 on: March 07, 2009, 09:56:54 PM »
Well that is strange. I have used the stick on a XP SP3 with no such outcome. But as Bob pointed out it depends on the product. If you used Avast, MBAM and SAS and they haven`t detected anything then your OK. No reason to panic.

Since you use ZA Pro than any unknown attempt to send out info would have been picked up. So again no worries. Just a standard install.
Computer Systems:

Intel Pentium 4 641 / 2GB RAM / Vista Home Basic SP2 / avast! 5.0 Home / SAS Free / MBAM Free / Windows Defender / Windows Firewall / Spyware Blaster/ Secunia PSI / Firefox 3.6 / Opera 10.5

Core2Duo T8300 / 4GB RAM / Vista Home Premium SP2 (32 bit version) / Same Software.

timcan

  • Guest
Re: USB Memory Stick Virus or Legit Install Software?
« Reply #6 on: March 07, 2009, 11:22:06 PM »
Hi, is this one of those flash drives with U3 software preinstalled?
http://www.u3.com/
I bought a ScanDisc drive one time with this on it.

Avastfan1

  • Guest
Re: USB Memory Stick Virus or Legit Install Software?
« Reply #7 on: March 07, 2009, 11:42:31 PM »
Dear Avast Forum Users and Gurus,

Many thanks again for the ongoing support. Confused Computer User's reassurance with the security products is also welcome news. So thanks for that.

Unfortunately the flash drive belonged to a friend so I don't know which brand or model it was. However, I can remember what it looked like and it looked a lot like the one in RNfromTN's link! Specifically, the silver bit that plugs into the computer retracted into the plastic part of the USB stick.

RnfromTN: When you bought the ScanDisc drive you mentioned, did you get a grey box pop up when you plugged it in advising that additional new software needed to be installed to use the USB stick?

Has anybody else had a similar experience with the grey box I describe (ie. a normal installation window) rather than the usual 'yellow bubbles' in the taskbar?

Thanks again and I look forward to your response!

Avastfan1

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: USB Memory Stick Virus or Legit Install Software?
« Reply #8 on: March 08, 2009, 12:42:25 AM »
You don't say what type of USB stick this is as other than U3 as mentioned, you shouldn't need to install anything as Windows should have all the needed USB drivers, especially if this is a later version of windows.

USB2 flash drives are pretty bog standard and windows XP/Vista should be able to cope with those without having to download anything. It may well say new hardware detected for the new USB but it should still be able to use a pre-installed USB driver.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Avastfan1

  • Guest
Re: USB Memory Stick Virus or Legit Install Software?
« Reply #9 on: March 08, 2009, 01:00:10 AM »
Hello DavidR,

Many thanks for your contribution as well! In hindsight I also found it a little strange that the installer window appeared. As mentioned, I stupidly clicked ok due to stress and fatigue. But that's my problem :-(

I assume it is a U3. I am not really across the different USB types. My experience up until now was when plugging a 'new' UBS stick in, the yellow bubbles would appear on the taskbar. For example, 'USB X detected' followed by 'USB now ready to use'.

Further perusal of this forum finds the PREVX mentioned frequently. I downloaded the free scan directly from their website. It came up with nothing. Tomorrow I will run a boot-time scan with Avast Pro, a full MBAM scan and a SAS scan. Moreover I will repost a HJT log to www.hijackthis.de for analysis.

Can you recommend any other steps I could take to check whether I have accidentally installed some malware or spyware piece of scheiße?

I already looked for an autorun.inf file on my hard disk. There were none in C:\ and I therefore think it was not an autorun virus.

Would really appreciate any expert help on this I could receive. I'm very open to suggestions and always read, and hold, the advice provided on this forum with very high regard.

Many thanks!!!

Avastfan1

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: USB Memory Stick Virus or Legit Install Software?
« Reply #10 on: March 08, 2009, 01:10:24 AM »
You are worried about something that isn't there.
It's normal when you first plugt a new USB drive into your system that you get a message that
it's been detected and that the driver has been installed.
This is only information for you to know that the new USB drive is ready to be used.

Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Avastfan1

  • Guest
Re: USB Memory Stick Virus or Legit Install Software?
« Reply #11 on: March 08, 2009, 01:16:04 AM »
Hi Bob3160,

Thanks for the reassurance :-) I agree it is normal for the driver to be installed for a new USB stick.

The only thing I found a little odd was the method (ie. a grey install box/window) instead of the usual 'yellow bubbles' which appear on the taskbar for Windows XP.

Thanks for your advice!!!

Best wishes,

Avastfan1

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: USB Memory Stick Virus or Legit Install Software?
« Reply #12 on: March 08, 2009, 01:21:39 AM »
If you don't know what type of devise it is I would suggest it isn't U3, more likely to be USB2 as U3 flash drives, a) generally costs more money, b) they make a big deal about it marketing, packaging, etc. They also normally come pre loaded with some U3 programs.

What is on the flash drive ?
U3 normally has some sort of launcher program, not generally autorun.inf.

When connected if you right click on the properties it should give some general info, see images.

Whilst it is usual to get messages (new hardware detected, etc.) when you first connect a USB device (memory stick), I have 'never' been asked to install anything. So I don't agree that when you load a new usb stick it is normal to install a driver, especially if you have a recent OS and you haven't confirmed what yours is.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

timcan

  • Guest
Re: USB Memory Stick Virus or Legit Install Software?
« Reply #13 on: March 08, 2009, 02:02:26 AM »




RnfromTN: When you bought the ScanDisc drive you mentioned, did you get a grey box pop up when you plugged it in advising that additional new software needed to be installed to use the USB stick?



Hi, I do remember getting a remember getting a popup of some type from my hips program,seems it was launchpad, been so long ago  :-[
If you run xp you should install   http://download.microsoft.com/download/f/c/a/fca6767b-9ed9-45a6-b352-839afb2a2679/TweakUiPowertoySetup.exe, not sure if it's vista compatable, and prevent autoruns. See screenshot. Hope this helps

Avastfan1

  • Guest
Re: USB Memory Stick Virus or Legit Install Software?
« Reply #14 on: March 08, 2009, 02:36:05 AM »
Hi DavidR, RNfromTN and other Gurus,

Sorry if I'm not explaining myself fully :-(

I am running Windows XP SP3. I don't actually know what was on the USB stick. I believe it was empty however I can't be sure. Worse yet - my friend is now overseas so I have no chance to re-examine the USB stick :-(

Perhaps you are correct and it is a USB 2. Not a USB 3. I just thought it might have been as it looked like the one in the link above which one lad kindly provided.

Can anybody therefore provide any tips to lessen my fears that I inadvertently installed something bad?

I will schedule an Avast boot-time scan, run a full MBAM scan, an SAS scan, Blacklight, Spybot, ZA-antispyware scan, post a HJT log to www.hijackthis.de, I've already run PREVX which came up with nothing.

Thanks for you help and please keep the suggestions coming!!!

Avastfan1