clamscan found this: BOOTx64.EFI: Win.Trojan.Agent-1428496 FOUND

[Mark Haney]

I agree with Liam. It seems your friends PC infected your USB key, not the
other way round.  This is a known issue with UEFI and Windows.  The flash
drive is easy to fix, your friends system, maybe not so much.


On Thu, Aug 25, 2016 at 7:52 AM, Liam Proven <lproven at gmail.com> wrote:

> On 25 August 2016 at 01:32, Joel Rees <joel.rees at gmail.com> wrote:
> > Then I took the liveUSB home and scanned it with clamscan on my home
> > box. Found this:
> >
> >>  /media/Ubuntu 14.04 ja amd64/EFI/BOOT/BOOTx64.EFI:
> Win.Trojan.Agent-1428496 FOUND
> >
> > I built the live USB back in April 2014, apparently.
>
>
> My interpretation would be that your USB key has been infected by
> malware on your friend's troublesome Wndows machine. EFI boot
> partitions are FAT32; so are live keys. They're both readable &
> writable by Windows.
>
> --
> Liam Proven • Profile: http://lproven.livejournal.com/profile
> Email: lproven at cix.co.uk • GMail/G+/Twitter/Flickr/Facebook: lproven
> MSN: lproven at hotmail.com • Skype/AIM/Yahoo/LinkedIn: liamproven
> Cell/Mobiles: +44 7939-087884 (UK) • +420 702 829 053 (ČR)
>
> --
> ubuntu-users mailing list
> ubuntu-users at lists.ubuntu.com
> Modify settings or unsubscribe at: https://lists.ubuntu.com/
> mailman/listinfo/ubuntu-users
>



-- 

Mark Haney ::: Senior Systems Engineer
*VIF* *International Education*
P.O. Box 3566 ::: Chapel Hill, N.C. 27515 ::: USA
919-265-5006 office

Global learning for all.
www.viflearn.com
Find VIF on Facebook <http://facebook.com/VIFInternationalEducation> |
Twitter <https://twitter.com/vifglobaled> | LinkedIn
<http://www.linkedin.com/company/vif-international-education>

Recognized as a ‘Best for the World’
<http://bestfortheworld.bcorporation.net/> B Corp!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20160825/0c48c799/attachment.html>