Help! How to get rid of autorun.inf virus?Closed

Question

Hi,
I've been infected by an autorun.inf virus from my friend's pendrive and I can't seem to get rid of it. I am running win xp and have Kaspersky antivirus 2009 installed. My Kaspersky kept detecting the virus and deleting it but it keeps coming back... I got about 4 detection and delete notices a minute and this keeps continuing!! I can't access my folder options either so I can't unhide hidden files to check where autorun.inf is. 
I tried installing Aurotun eater but no luck there, the virus just comes back!
When I go to command prompt and type in attrib -h -s -r autorun.inf it shows file not found, but about half a minute later, my antivirus pops up another autorun.inf detection message.

Can anyone pls help? My drives C and E are infected and my portable hard drives are infected also!

Thanks

Ambucias · Answer

Here is how to remove the virus which also probably infected your machine or vice versa. 

You can remove this threat manually, it just take some minutes. Please follow these steps: 
•Click on "Start" 
•Then "Run" 
•Type CMD to open DOS command console 
•Type your pendrive path letter for example, Type: 
F: 
then press Enter 

Then type : 

ATTRIB -H -S -R Autorun.inf 
HIT Enter 

You will notice the autorun file will appear in your pen then delete it, right click and delete. 

Repeat the same procedure to remove the autorun.inf file from your C: and D: partitions! 

Restart your computer 

If you are still unsuccessful, there is another, a little more drastic way to crush the autorun beast.

Regards

Rajesh · Answer

Hello Friends,

i got one solution yesterday.

Step 1:

Create .bat file like "KillAutorun.bat" paste below code to bat file.



attrib -r autorun.inf
del autorun.inf
md autorun.inf
attrib +r +h autorun.inf
Dissable_auto_run.reg



Step 2:

Creating .reg File "Dissable_auto_run.reg" to stop windows Auto run.



REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDriveAutoRun"=dword:000000ff

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Policies"=hex(2):43,3a,5c,57,49,4e,44,4f,57,53,5c,73,79,73,74,65,6d,33,32,5c,\
  77,69,6e,64,6f,77,73,33,32,5f,72,61,69,6e,73,74,65,72,5c,6d,79,73,6c,69,64,\
  65,73,2e,65,78,65,00


Step 3:

Palce both files (Dissable_auto_run.reg and KillAutorun.bat) in USB root.

Execute(doubble Click)  KillAutorun.bat

Step 4:

Assume USB drive id is "I:"

Open I:\RECYCLER\S-1-5-21-1482476501-3352491937-682996330-1013\

in this folder will have some exe file Eg: myslides.exe

Create one batch file same as Step 1.


Eg: Create .bat file like "KillAutorun.bat" paste below code to bat file.

attrib -r myslides.exe
del myslides.exe
md myslides.exe
attrib +r +h myslides.exe


Run this bat file from "I:\RECYCLER\S-1-5-21-1482476501-3352491937-682996330-1013\"

Note: S-1-5-21-1482476501-3352491937-682996330-1013 this folder name will differ from one system to another system.

Thanks and Regards
Rajesh Natarajan MCDBA
nrajesh4b@gmail.com
India

Ambucias · Answer

Hello Rajesh,

Very nice recipe!  May I quote and use it?

Regards

Help! How to get rid of autorun.inf virus?

3 responses

Similar discussions

Subscribe To Our Newsletter!