Ask a question Report

Help! How to get rid of autorun.inf virus?

nic - Latest answer on Mar 17, 2010 10:37AM
Hi,
I've been infected by an autorun.inf virus from my friend's pendrive and I can't seem to get rid of it. I am running win xp and have Kaspersky antivirus 2009 installed. My Kaspersky kept detecting the virus and deleting it but it keeps coming back... I got about 4 detection and delete notices a minute and this keeps continuing!! I can't access my folder options either so I can't unhide hidden files to check where autorun.inf is.
I tried installing Aurotun eater but no luck there, the virus just comes back!
When I go to command prompt and type in attrib -h -s -r autorun.inf it shows file not found, but about half a minute later, my antivirus pops up another autorun.inf detection message.
Can anyone pls help? My drives C and E are infected and my portable hard drives are infected also!
Thanks
Read more 
Answer
+0
moins plus
Here is how to remove the virus which also probably infected your machine or vice versa.

You can remove this threat manually, it just take some minutes. Please follow these steps:
•Click on "Start"
•Then "Run"
•Type CMD to open DOS command console
•Type your pendrive path letter for example, Type:
F:
then press Enter

Then type :

ATTRIB -H -S -R Autorun.inf
HIT Enter

You will notice the autorun file will appear in your pen then delete it, right click and delete.

Repeat the same procedure to remove the autorun.inf file from your C: and D: partitions!

Restart your computer

If you are still unsuccessful, there is another, a little more drastic way to crush the autorun beast.

Regards
Add comment
Answer
+0
moins plus
Hello Rajesh,

Very nice recipe! May I quote and use it?

Regards
Add comment
Answer
-1
moins plus
Hello Friends,

i got one solution yesterday.

Step 1:

Create .bat file like "KillAutorun.bat" paste below code to bat file.



attrib -r autorun.inf
del autorun.inf
md autorun.inf
attrib +r +h autorun.inf
Dissable_auto_run.reg



Step 2:

Creating .reg File "Dissable_auto_run.reg" to stop windows Auto run.



REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDriveAutoRun"=dword:000000ff

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Policies"=hex(2):43,3a,5c,57,49,4e,44,4f,57,53,5c,73,79,73,74,65,6d,33,32,5c,\
77,69,6e,64,6f,77,73,33,32,5f,72,61,69,6e,73,74,65,72,5c,6d,79,73,6c,69,64,\
65,73,2e,65,78,65,00


Step 3:

Palce both files (Dissable_auto_run.reg and KillAutorun.bat) in USB root.

Execute(doubble Click) KillAutorun.bat

Step 4:

Assume USB drive id is "I:"

Open I:\RECYCLER\S-1-5-21-1482476501-3352491937-682996330-1013\

in this folder will have some exe file Eg: myslides.exe

Create one batch file same as Step 1.


Eg: Create .bat file like "KillAutorun.bat" paste below code to bat file.

attrib -r myslides.exe
del myslides.exe
md myslides.exe
attrib +r +h myslides.exe


Run this bat file from "I:\RECYCLER\S-1-5-21-1482476501-3352491937-682996330-1013\"

Note: S-1-5-21-1482476501-3352491937-682996330-1013 this folder name will differ from one system to another system.

Thanks and Regards
Rajesh Natarajan MCDBA
nrajesh4b@gmail.com
India
Add comment
This document entitled « Help! How to get rid of autorun.inf virus? » from CCM (ccm.net) is made available under the Creative Commons license. You can copy, modify copies of this page, under the conditions stipulated by the license, as this note appears clearly.

Not a member yet?

sign-up, it takes less than a minute and it's free!

Members get more answers than anonymous users.

Being a member gives you detailed monitoring of your requests.

Being a member gives you additional options.