A few words of thanks would be greatly appreciated.

How to delete virus "autorun.inf"

Virus attacks on a computer have become a trivial issue nowadays, but if the viruses are active, it can still corrupt many documents and folders which the user has been using. It is therefore really essential to delete all viruses permanently. The effect of viruses in a user's files and folders can be really tough to defend against. Individuals are always advised to get antivirus software. You can get this in autorun.int. The effects of using AVG with a computer are good. This is an effective way to delete malware in autorun.int in a computer.


It seems like I have succeeded in getting rid of the virus "autorun.inf" by downloading, updating, and running AVG 8.0.
  • But I still cannot open hidden files or folders, and I still cannot open my C or D drive directly from "My Computer".
  • Is the virus still there?
  • How can I know for sure and how can I get rid of it for ever?


Whenever you plug a USB drive into your computer, a window will appear (if your autorun is enabled).

Don't click on OK, just choose 'Cancel'.

Open your command prompt. Type 'cmd' in the run box or on the search panel if you are using Vista.

In the command prompt type the drive letter of your USB device and press Enter. ex. C:\F: <-- then press Enter.

Type dir /w/a and press Enter. ex F:\ dir /w/a <-- then press Enter.

This will display a list of the files in your flash drive. Check if the following files present on your USB device.
  • Autorun.inf
  • Ravmon.exe
  • New Folder.exe
  • svchost.exe
  • Heap41a
  • Or any other exe file that you find suspicious.
  • If you spotted any of the above files, then most probably your drive is infected.
  • To remove the virus, type into your command prompt "attrib -r -a -s -h *.* and press Enter. This will remove the Read Only, Archive, System and hidden file attribute from all the files.
  • To delete the virus just type DEL and the filename ex. F:\del virus.exe and hit Enter. Delete all the files that you suspect are a virus. After deleting the virus, run a virus scan on your USB device just to make sure that your device is clean.
  • Remove the USB drive and plug it in again. In most cases, the real culprit is the "Autorun.inf" file which gets executed when someone clicks OK in the dialogue window which appears above. Thus the infections can spread.

Thanks to Ramba for this tip on the forum.

A few words of thanks would be greatly appreciated.

Ask a question
CCM is a leading international tech website. Our content is written in collaboration with IT experts, under the direction of Jean-François Pillou, founder of CCM.net. CCM reaches more than 50 million unique visitors per month and is available in 11 languages.


This document, titled « How to delete virus "autorun.inf" », is available under the Creative Commons license. Any copy, reuse, or modification of the content should be sufficiently credited to CCM (ccm.net).