How to delete virus "autorun.inf"

Ask a question
Virus attacks on a computer have become a trivial issue nowadays, but if the viruses are active, it can still corrupt many documents and folders which the user has been using. It is therefore really essential to delete all viruses permanently. The effect of viruses in a user's files and folders can be really tough to defend against. Individuals are always advised to get antivirus software. You can get this in The effects of using AVG with a computer are good. This is an effective way to delete malware in in a computer.


It seems like I have succeeded in getting rid of the virus "autorun.inf" by downloading, updating, and running AVG 8.0.
  • But I still cannot open hidden files or folders, and I still cannot open my C or D drive directly from "My Computer".
  • Is the virus still there?
  • How can I know for sure and how can I get rid of it for ever?


Whenever you plug a USB drive into your computer, a window will appear (if your autorun is enabled).

Don't click on OK, just choose 'Cancel'.

Open your command prompt. Type 'cmd' in the run box or on the search panel if you are using Vista.

In the command prompt type the drive letter of your USB device and press Enter. ex. C:\F: <-- then press Enter.

Type dir /w/a and press Enter. ex F:\ dir /w/a <-- then press Enter.

This will display a list of the files in your flash drive. Check if the following files present on your USB device.
  • Autorun.inf
  • Ravmon.exe
  • New Folder.exe
  • svchost.exe
  • Heap41a
  • Or any other exe file that you find suspicious.
  • If you spotted any of the above files, then most probably your drive is infected.
  • To remove the virus, type into your command prompt "attrib -r -a -s -h *.* and press Enter. This will remove the Read Only, Archive, System and hidden file attribute from all the files.
  • To delete the virus just type DEL and the filename ex. F:\del virus.exe and hit Enter. Delete all the files that you suspect are a virus. After deleting the virus, run a virus scan on your USB device just to make sure that your device is clean.
  • Remove the USB drive and plug it in again. In most cases, the real culprit is the "Autorun.inf" file which gets executed when someone clicks OK in the dialogue window which appears above. Thus the infections can spread.

Thanks to Ramba for this tip on the forum.

Trojan - clean.vbs
ESET Nod 32 - Set a master password