Voaheax.exe virus on my USB thumb drive

Discussion in 'Malware Help (A Specialist Will Reply)' started by beano505, Apr 27, 2011.

  1. beano505

    beano505 Private E-2

    I have an unusual virus on my USB thumb drive, which is diasppointing because I really value the files there. When trying to open files, I get an error message saying "the item 'voaheax.exe' that this shortcut refers to has been changed or moved, so that this shortcut will no longer work properly".
    _ALL _ my files say this when I try to open them, so I Googled "voaheax.exe" and got ONE result only !!!!! .........It's for an antivirus program called Prevx 3.0 which claims to remove this virus. Free scan, but you have to pay for the program if you want to clean your USB stick.....or computer.
    Only one Google result for voaheax.exe seems odd. But there it is, on my USB, preventing me opening anything.
    I can't use an onboard antivirus program (apart from the ones I find in cafes) because I'm travelling and using internet cafes.
    Any suggestions, anyone ??
     
    beano505, Apr 27, 2011
    #1
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Insert your flash drive before you begin. Hold down the Shift key when inserting the flash drive until Windows detects it to bypass the autorun feature. This will keep the autorun.inf from executing automatically.

    Please have all your removable storage devices ready for disinfection.

    Download Flash Disinfector by sUBs and save it to your desktop.

    * Double-click Flash_Disinfector.exe to run it.
    * Your desktop and icons may disappear. This is normal.
    * It will do a cleanup of removable storage devices, and write a protected Autorun.inf file to help prevent re-infection.
    * Follow any prompts that may appear.
    * The utility may ask you to insert your flash drive and/or other removable drives including your mobile phone. Please do so and allow the utility to clean up those drives as well.
    * Wait until it has finished scanning and then exit the program.
    * There will be no GUI interface or log file produced.
    * Reboot your computer when done.

    Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive plugged in when you ran it. Don't delete this folder. It will help protect your drives from future infection.
     
    TimW, Apr 27, 2011
    #2
  3. beano505

    beano505 Private E-2

    Hi Tim, thanks for your time.
    I just downloaded this program and did what you said, but no luck.
    I did manage to somehow download (possibly by holding down the shift key) all the photos onto a computer in this internet cafe, but cannot download any documents ( OR photos ) when I click on the icons displayed when I plug in my flash drive. They are shown as shortcuts, and when trying to open files, I get an error message saying "the item 'voaheax.exe' that this shortcut refers to has been changed or moved, so that this shortcut will no longer work properly".
    Any other suggestions would be most welcome.
     
    beano505, Apr 27, 2011
    #3
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Plug your flash drive into the computer and then run both SAS and MBAM doing a deep scan to include that drive. Attach the logs when you are finished.
     
    TimW, Apr 28, 2011
    #4
  5. beano505

    beano505 Private E-2

    Thanks for the suggestion, Tim. I don't know what SAS is, but I used MBAB to scan the flash drive and here is the log, attached. It SEEMS to have scanned more than the flash drive......
    Oddly, until yesterday, a Google search of "voaheax.exe" yielded only ONE result (though I would have picked up this virus some time ago ), and since then there have been 3 other Google results, refelecting my activity on this forum and an expatriate forum in Thailand (where I currently reside).
    The one original result is for a program called "Prevx 3.0", which claims to be able to delete it from my computer. Doesn't say anything about flash drives, which is in fact my problem. And although they let you download it for free, it only scans.........if you want to use it to remove viruses, it costs.
     

    Attached Files:

    Last edited: Apr 28, 2011
    beano505, Apr 28, 2011
    #5
  6. beano505

    beano505 Private E-2

    Oops....I mean I used MBAM......Malwarebytes
     
    beano505, Apr 29, 2011
    #6
  7. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    SAS is SuperAntispyware. When you ran MBAM, did you fix what it found?? Again, run SAS on a deep scan to include your flash drive. Then run HITMAN.
     
    TimW, Apr 29, 2011
    #7

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds