Share via

Virus in USB Flash Drive & Hidden Folder Called "NewFolder.exe"?

Anonymous
2014-07-22T19:12:34+00:00

Hello,

I am in need of help regarding a virus. I'll provide as much detail possible from the things that have happened as I have no knowledge in how a virus can occur in the first place:

I recently inserted my USB drive to my PC because I wanted to transfer new pictures that I got from another computer (not mine). As soon as I did this, Trend Micro Titanium detected a virus (when the USB was fine all this time) and then I just restarted the PC. In the antivirus program there is a listing of the 'affected files' some of them being the names of the folders I originally had in the USB drive. The new ones I don't recognize are called:

newfolder.exe

Trashes.exe

Spotlight-V100.exe

.fseventsd.exe

System Volume Information.exe

Just to be safe, I formatted the USB flash drive and I got the same picture files from that computer again and then tried it once more. This time, when I had the drive's folder open I saw the 'newfolder.exe' and the folder (with the pictures) is grayed out (hidden).

By the way, in the threat details the name is listed as "TROJ_SPNR.14E413".

It detected the same virus and removed it right away so when I scanned that drive there was nothing found. I also did a full scan and it was fine.  However I just want to be 100% sure if both my flash drive but more importantly PC is safe.

However I just want to be 100% sure if both my flash drive but more importantly PC is safe.

The thing I don't understand is , why is the folder with the pictures grayed out hidden and read only? What do I need to do?

Windows for home | Previous Windows versions | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

Anonymous
2014-07-22T22:30:06+00:00

I recently inserted my USB drive to my PC because I wanted to transfer new pictures that I got from another computer (not mine). As soon as I did this, Trend Micro Titanium detected a virus...

If the other computer was infected, connecting even a freshly-formatted flash drive to it can immediately infect the flash drive. When you connect the flash drive to your computer, your computer can immediately become infected, too.

Your best bet is to destroy & throw away that flash drive then don't connect any other flash drives to the other computer (or any flash drive that's been connected to the other computer to your computer).

Please contact TrendMicro Support for any further guidance you need to questions you may have - or you could begin your own, new thread in this forum => http://community.trendmicro.com/t5/Titanium/bd-p/titanium-forum

Was this answer helpful?

6 people found this answer helpful.
0 comments

6 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2014-07-24T05:42:21+00:00

    ...the thing is, the detected threat was removed [by?] TrendMicro which was only showing in the USB drive. After formatting the USB I retrieved the pictures again and then when the same virus was detected it was removed again

    If you connected the USB drive to the other computer and the other computer is infected (and not fully-patched at Windows Update), the USB drive would have been infected again.

    If you then connected the infected USB drive to your computer, your computer may have been infected again.

    It's like a cold: If you catch a cold from your friend, you get better in a few days but your friend doesn't, chances are you're gonna catch his cold again when you, e.g., kiss him/shake his hand/use his keyboard.

    Was this answer helpful?

    0 comments
  2. bhringer-9380 4,350 Reputation points Volunteer Moderator
    2014-07-24T02:34:51+00:00

    For additional reference see the following:

    Pen Drive Autorun Viruses

    http://pcgyaan.wordpress.com/2009/11/16/tips-for-a-healthy-pc/

    Was this answer helpful?

    0 comments
  3. Anonymous
    2014-07-24T02:21:49+00:00

    Hi, thank you for your reply.  I also went and posted it in the link. But the thing is, the detected threat was removed in TrendMicro which was only showing in the USB drive. After formatting the USB I retrieved the pictures again and then when the same virus was detected it was removed again and so currently I only have a folder with the pictures but the folder is actually transparent because it seems to be a hidden file and read only. Why is this happening? Does that mean it's still unsafe?

    Was this answer helpful?

    0 comments
  4. Anonymous
    2014-07-23T00:21:30+00:00

    Download and run this utility after performing a full scan with your installed virus scanner on both PCs and the USB thumb drive.

    http://www.bleepingcomputer.com/download/unhide/

    -steve

    Was this answer helpful?

    0 comments