Shouldn't mbam have caught this?

[flamewalker]

I got my flash drive infected with the following apparently:

Files Infected:

C:\WINDOWS\sysguard.exe (Trojan.FakeAlert.H) -> Quarantined and deleted successfully.

Shouldn't malwarebytes protect against infected flash drives that get an auto-run file installed on it, if MBAM detects the file in the first place? Before you ask, yes malwarebytes was up to date and the protection module was enabled.

Or was it possible that the file that installed this wasn't detected?

Confused...

Thanks

[AdvancedSetup]

Very difficult to tell exactly how it got on the system, or if it was already on the system. MBAM tries very hard to stop stuff but it's always an ongoing battle and it can't stop everything, every time.

You may want to post in the HJT forum and have someone review logs to ensure the system is clean.

[flamewalker]

Yeah unfortunately another program had already purged the autorun file from the flash drive or I would have submitted it. I understand the battle. Was just surprised that it didn't detect something it detects during a scan, when it tried to run.

[AdvancedSetup]

You might want to take a look at this article.

Format USB Thumbdrive to NTFS

Basically creating your own autorun.inf and removing rights for anyone to run it helps to stop those type of infections from going from PC to PC.