Hello, To whom who might help me (Mr. Ali ?)
It seems that I have succeeded to get rid of virus "autorun.inf" by downloading, updating, and running AVG 8.0.
But I can still not open hidden files or folders, and I can still not open my C or D drive directly from "My Computer"
Is the virus still there ?
How can I know for sure and how to get rid of it for ever ?
Kindly Mr. Bridge (in some troubled water right now)
first run your system in safe mode, then go to your my computer properties and enable the system restore function.
then restart your computer and run in command prompt mode. in the command mode type the following.
ATTRIB Autorun.inf -H -S -R.
if the file is found in the Drive then give.
DEL Autorun.inf.
<similarly you can do it for all drives. but you have to restart your system for each drive.>
hi..my AVG 8.0 shows AUTORUN.INF wenever I insert my pendrive in my PC...i delete it each and every time but it keeps on showing..i also formatted the pen drive...yet its showing..wat do I do.???? i'm using WINDOWS XP, AMKETTE is the name of my pendrive...
hi dude,
follow the steps to control the virus.
1 dont install more then one antivirus software(if there is too many antivirus software install remove any one as u prefer) .
2 update ur antivirus defination (symantec ,macfee,etc).
3 disable the system restore option in my computer >system properties>system restore>disable .(if it is not disabled virus will start to spread)
4 run windows live update to ensure all pathces are updated ,if its not update then update the windows pathes
4 reboot the system and press f8 and select safe mode.
5 run full scan with ur antivirus software
6 delete virus which detected by antivirus software .
7 ensure antivirus and windows update to be upto date
all the very best
Hi,
My operation System is Windows XP..I recently tried to open some movie sites and from then onwards I've been facing issues with my system...AM having Norton Anti Virus, but I think the cirus in my system is not lettin it run..Every one min interval, I get a pop box sayin " your computer has security risk..Please scan for virus" I hit the cancel button and a web page opens which shows anykuy.com and shows not available.......
quick hael's all updated latest trial version didn't even detect autorun.inf in my cd.
avira trial version was stuck at the pt. it found it,but atleast I could see its name
The reason the autorun.inf file continues to show is because it is being continuously copied to every available drive on your system... I know this because I recently got a virus... so, In order to better understand how they work so that I could get rid of it... I researched how to make one... To manually delete it you will need to delete certain registry values in order to prevent it from autorunning on system startup... however; I do not know what version of the virus you have... That being the case, you should probably get some professional help.
HI,
Me too h'v the same prob.I h'v applied several ways to overcome this autorun.inf like installing the Tweak,freecommander,through command mode,etc.Even when I plug a pendrive into my laptop, Avast antivirus says that "A virus has been detected" the same AutoRun.inf.I got rid of it in removing.When I went for a new Usb pen drive, the autorun.inf went into it too.
Kindly send me inreply when you find a way to crack it as me.
in my coputer I found autorun.inf , its shown set up information. the autorun not remove pendrive, memori card. when I go delete its shown the programme is use another person. plese help me and sove this problem
see when ever I use this AVG 8, I can see the same error, recently I format my system and put avast and there is no issue with mine now,, I think there is some file with compatibility issue between AVG 8 nad Xp.. also I tried Norton and bit diffender,, I see no such issues, so better to format and use any other antivirus,,
hii......i am facing a new problem.....when ever I insert my transend pendrive and my nokia 3110 with my computer then ''autorun.inf'' virus is activated.after scannig these device with avast antivirus 4.8 the same virus activated.....formatting these device the '' autorun.inf'' virus can not be removed.....please give me the procedure or tell me the name of the software to remove this virus from pendrive or from mobile phone.........
First of all the Anti Virus you are using is the worst software download Symentec AntiVirus from the website. When ever you use Pen Drive dont click directly to open drive (Penn Drive) right click on the Pen Drive and Click on Explore that is the best option for not spreading viruses on your all drives its safe from viruses. And also run Live Updates weekly on your system to keep your system safe from viruses.
whether this procedure has to be done in safe mode or normal mode? I mean after enabling system restore in safe mode whether windows to be rstarted in safe mode or Normal mode
Just partition your hard disk and install Linux in the other partition. After that boot in Linux and open your windows partition and delete the infected files. This procedure work for thumbs.db also. If the file is locked unlock it with any software available on the net the boot it in windows. One can even use live DVD of Linux.
Hi Kannan, My computer does not start in Safe Mode. What should I do?
When Press F8 , the message I get is " select the booting drive"
how to go to safe mode
start u r comp and press f8 key and select safe mode First run your system in safe mode, then go to your my computer properties and enable the system restore function.
then restart your computer and run in command prompt mode. in the command mode type the following.
ATTRIB Autorun.inf -H -S -R.
if the file is found in the Drive then give.
DEL Autorun.inf.
<similarly you can do it for all drives. but you have to restart your system for each drive.>
i am removing the autorun.inf other window I am rmove autorun.inf and m0vnonh.bat file but iam click the drive open the another driver and folder opten is not show the hidden driver plese help me
you must use flash disinfector named small program.it leaves autorun.inf named folders in c: and example e: means your usb memory.and it makes it after deleting the autorun.inf virüs from your usb memory.as you know as you delete this virüs from your usb memory if you dont plug out the flash disk and you make a newer scan it makes right and dont find it once again.but if you plug out the usbmemeory and plugit in once again the anti autorun.inf program finds it for many times like this.i used as finding autorun.inf virüs the combofix security program to find the autorun.inf virüs .anyway generally most of the security program detects this virüs.the trouble is ommiting this virüs for dont come again.whatever I do I couldnot success to delete this virüs permanently.but at last I saw alink means flash disinfector program.it is a very small program.i ran it and it firstly deleted this virüs from c: and from my plugged usb memory in to the laptop .then it created a secret folder in c: and f: then my usbfolder.named autorun.inf folder.after used this program how much I use it for times no program could find autorun.inf virüs no place of my computer and or to delete it.it means I succeeded to ommit autorun.inf virüs permanently.but you mustnot delete or format the flashdisinfector program done and created autorun.inf folder in the usb memory.every formatted the usb memory I advise you flashdisinfector use and make a actually solution to prevent autorun.inf virüs non infecting your usb once again.my proof it that before using flashdisinfector usbflashdisk virüs remove program every times found this virüs after used flash disinfector program no kind non of the security program can find this virüs because it was permanently ommmitted.really ommitted .
Hi, brother,
my problem, im unable to install avast.
I formatted my system recently which has avast installed onit previously,
but when im trying to install now, the system is restarting automatically.
what I hav to do?
kindly reply...
hii kannan
I have used command prompt's command as said by you to delete my autorun.inf. .
but it is not removed, I have also used autorun remover to delete it, but it wasn't delete.
<This virus spread in my all directories.> so what should I do now??????
HI GOOD DAY.. IM HOPING YOU CAN HELP ME. MY LAPTOP IS INFECTED WITH SOME KIND OF VIRUS. I CANT UPDATE MY ANTI VIRUS PROGRAM IT'S MALWAREBYTES. AND I CANT GO TO ANY SITED RELATED TO ANTI MALWARE. HOW DO I GET RID OF THIS. THANK YOU AND GOOD DAY
hi sir
i got a big problem in my laptop.
files are being deleted from folders but not folder.
suppose MERRY contains 100 files of jpg images . the images will be deleted but folder MERRY will not be deleted.
please tell me how can I get rid from thjis problem
There has been a virus named "autorun.inf" in my pen-drives...i got it from a friend.
I know it's been a long while since most of the anti-viruses have its definitions.
But I think this is an improved version of this virus.
I've tried getting it detected by different anti-viruses but none of those could even detect it except NOD32 which stated that it will delete it after restart but now it is also not detecting it.
I tried to detect it by DOS command (attrib)
[
'attrib' is not recognized as an internal or external command,
operable program or batch file.
]
It has blocked my "Add/Remove Program" option too.
It as corrupted my Files & Folder hiding software (My Lockbox) also.
And when I tried to uninstall it, it said that there's a problem because i've installed "Hide Folders 2009" which, by the way, I DID NOT.
And many other things.
It's really very frustrating thing as I don't want to install the whole windows again.
SO, PLEASE help me out ASAP.
Thank you for your valuable suggestion for the removal of autorun.inf virus from my pen drive.
M. Kannan
Govt. Hr. Sec. School-Vaitheeswarankoil &
K. Kannan
D.B.T.R. National Hr. Sec. School-Mayiladuthurai.
autorun.inf is not a virus if you find this file in a CD or DVD..
but when you find this file in a Drive, Hard Disk Drive or Removable
drive (USB Flash Disk Drive), where there are no Setup.exe for an
installer, then it is definitely a file created by Computer Worm
or Computer Virus, that when you autoplay it and execute the
autorun.inf, then the Worm or Virus will be triggered and then
it activates.
use Avast! Antivirus (Avast! Home Edition - free - should be
sufficient. then use Avast boot scan.
Microsoft affiliated Antiviruses like AVG, Avira, McAfee,
Norton Symantec, ESET NOD, Panda and other
microsoft affiliated antiviruses only slows down your system
and they are the ones giving your computer a Malware.
If after deleting autorun.inf, and you still don't see your files,
that is because the viruses did somethings in your file,
like it made your files Hidden (it's a file property).
Viruses/Worms make your files:
- Hidden files
- System files
after deleting autorun.inf and the virus/worm from your computer,
this doesn't show your hidden files. because it is an effect
that the virus did to your files.
to see your files, go to Folder and Search Options.
Or if you have a Menu bar, go to Tools>Folder Options.
a dialog box pops out, go to View tab.
choose the "Show hidden files, folders, and dirves" option...
then uncheck the boxes
- Hide extensions for known file types
- Hide protected operating system files (Recommended).
after doing these steps, then you'll be able to see your hidden
files that your previous worm/virus did to them.
Connect ur phone with the PC via USB Cable...
Scan it... using AVG or AVAST...
Remove the virus... autorun.inf
If problem persists.... follow the procedure....
1. Connect phone to PC
2. Note down the Drive name... lets say drive G:
3. Start cmd (command prompt) from "Run" in "Start"
4. write G: and press enter...
5. write "attrib -h -s -r autorun.inf" and press enter
6. then write "del autorun.inf"
how to delete system volume information file through command prompt?
i changed the permissions using 'attrib' command
then I enter the command like attrib -h -s -r "system volume information"
after wards I enterd del "system volume information"...
but it is not deleted
what is the problem?
access denined problem I am getting.......I am in administration mode itself?
i want the reply ASAP....................
plzzz help me to get ride of virus from my mac book pro..i have no clue how to clean it or run anti virus...plzzz help me I get lots of pop ups..and when I open some sites my ie automatically moves...plzzzz
I'm never infected by an USB Stick virus because I use a french software : Anti-Autorun.inf : http://delphiblog.site.voila.fr/pages/programme_135_anti_autorun_inf.html, I still launch this program before I connect an USB Stick. If this program see an "Antorun.inf", this program destroy it. For Start the program, click on "Demarrer".
Open Command Prompt -> Type the drive name say G: -> Type ATTRIB -H -R -S AUTORUN.INF -> Type EDIT AUTORUN.INF -> A new window appears; delete all the contents and click on File -> Save and click on File -> Exit
On command prompt -> Type ATTRIB +H +R +S AUTORUN.INF -> Type EXIT
Remove and reinsert the pen drive.
Now, The virus is completely removed.
Regarding any queries or any new problems , viruses or solutions contact me Darkhk3rAmit@H0TMAIL.CoM
You cannot remove the autorun.inf and scrap files from you usb drive because you system has been infected by a worm. This worm installs kbdrv16 at startup and runs fake services.exe and lsass.exe it also runs keyboard.exe.
That is, it creates multiples processes in your computer that is not easily removed.
even you will reformat yuor drive the worm will still be there----solution--- install latest kaspersky internet security even trial version...thats all ....
Whenever you plug a USB drive in your computer, a window will appear (if your autorun is enabled).
Don’t click on Ok , just choose ‘Cancel’.
Open your command prompt. Type ‘cmd’ in the run box or on the search panel if you are using vista
In the command prompt type the drive letter of your usb device and press enter. ex. C:\F: <— then press enter
Type dir /w/a and press enter. ex F:\ dir /w/a <— then press enter
This will display a list of the files in in your flash drive. Check if the following files present on your USB device.
* Autorun.inf
* Ravmon.exe
* New Folder.exe
* svchost.exe
* Heap41a
* or any other exe file that you find suspicious.
If you spotted any of the above files, then most probably your drive is infected.
To remove the virus, type in to your command prompt “attrib -r -a -s -h *.* and press enter. This will remove the Read Only, Archive, System and hidden file attribute from all the files.
To delete the virus just type del and the filename ex. F:\del virus.exe and hit enter.Delete all the files that you suspected is a virus. After deleting the virus, run a virus scan on your USB device just to make sure that your device is clean.
Remove the USB drive and plug it again. In most cases, the real culprit is “Autorun.inf” file which gets executed when someone clicks Ok in the dialog window which appears above. Thus the infections can spread.
Ahh! Thank you! The autorun was executing and .exe file hidden under some other extension. I renamed the executing file so that the autorun.exe couldn't find it and then was able to delete everything. :)
1. click on Start Button
2.then Click on Run
3. write down "cmd" in the Run box
then u can see a CMD box.
Here, u will write down cd...(Change directory)
u can see like this C:\>
then write c:\> attrib
when u will write this command "attrib" it will show u all of your affected file.
but u should only attentive for SHR autorun.inf and SHR AUTOTEXT.bat(these are virus)
then follow this instruction>>>
C:\>attrib -s -h -r autorun.inf
C:\> del autorun.inf
and then restart your computer. if u see this problem again then just delete autorun.inf. you should do samething for all of your drivers.
- THANK YOU so much.. it really helped me.. autorun.inf have been bugging me for months.. i'm super thankful that you solved my problem..
i have another problem and i'm hoping that you can help me..
can you help me make my computer operation faster.. because you know, it operates very slowly, sometimes, I want to hurt the computer because its so slow.. how can I make it more faster? Im using Windows XP and PENTIUM III.. there must be some problem so can you please help me? it will really help me, especially in my studies.. pls do help me..
in command prompt I found autoexec.bat. is this due to autorun virus? there r 2 auto run virus in quarantined items in my laptop. how can I remove them?
Helllooooo
OHhhhhhhhhhhhhhhhhhhhhhh ssso cute of you guy!!!!!!!! THANK YOU VERY MUCH.
You have solved my problem within 2 minutes.OHhhhh I am vey happy.
Actually my E and F drives were not showing my all the data in it, however their these were full in size. But thanx GOD I have open this website forum and watches your suggestion.
I dont know who you are but I will pray for you for this kindness.
frist go to command prompt and that unhide autorun.inf fine and edit autorun.inf file after edit the file u can remove all entries in autorun.inf and restart computer now you check ur problem it is ok
Sir/Madam,
Kindly suggest me how to remove autorun.inf file which is hidden in pen drive. I have formatted the same but still unable to remove autorun.inf file. Thanks
At first ,
1. click on Start Button
2.then Click on Run
3. write down "cmd" in the Run box
then u can see a CMD box.
Here, u will write down cd...(Change directory)
u can see like this C:\>
then write c:\> attrib
when u will write this command "attrib" it will show u all of your affected file.
but u should only attentive for SHR autorun.inf and SHR AUTOTEXT.bat(these are virus)
then follow this instruction>>>
C:\>attrib -s -h -r autorun.inf
C:\> del autorun.inf
and then restart your computer. if u see this problem again then just delete autorun.inf. you should do samething for all of your drivers......
Thanks...
Solution from Search-and-destroy.
If you own a computer, you must have antispyware to keep it running at its best. The problem is choosing a scan that works. I have tried many different types of scans in the past and then I ran across Search-and-destroy Antispyware. I have to say that the antispyware solution from Search-and-destroy is the best that I have used to date. It gets the job done and keeps my computer working like new. If you are interested in seeing for yourself just how good this antispyware works you can click on http://www.Search-and-destroy.com/antispyware.html to learn more. I'm sure it would be worth your time to check it out.
hi , if you want to delete the virus from ur system , then do onething instead of runing the anitvirus do the following
1 - boot ur machine in safe mode
2 - run antivirus scan
as I m sure that I will work , then I will tell ur further typical steps
1) Go to Command prompt then go to C drive then type the command "dir/ah" then enter u see their Autorun.inf file.
after that start the system in Safe mode.
In safe mode go to Command prompt type the Command " attrib -h -r -s autorun.inf " then type the Command "del autorun.inf" so successfully this virus is remove.
2) Disable autorun from registry
go to run type the command "regedit" then enter , after that r registry edit window open , then going to HKEY_ CURRENT_USER\User\software\Microsoft\windows\current version\policies\explore. In right side area " NoDriveAutorun" value are their just double click on this value and insert value data FF and select hexadecimal.
then close the window and restart the computer .
hii ,to delete autorun.inf,enable show hidden files,unchechk the hide extension for knwon types and hide uncheck operting system files also than close that ,open explorer their you can find the autorun.inf in each drive ,restrat the computer
Avgantivirus detects some viruses and not all. But u say it is detecting. Then try to heal the virus or delete the virus files with the options in Avg. Better Option is try some other antivirus like Avira or Mcafee antivirus
to delete autorun virus:
1) check in root directory of all drives i.e(c: , d: etc.)with the help of winrar, if there exist autorun.inf file in every partion of ur hard disk then there is autorun virus..
2)download a program called usb firewall by typing in google or http://download.cnet.com/USB-FireWall/3000-2239_4-10817831.html 3) install it and then start the sytem in safe mode.
4) run this program in safe mode...it will remove the virus from all partions..
has helped 1678 users this month
based on your suggestion I have removed autorun from my pendrive
M. Kannan
Govt. Hr. Sec. School-Vaitheeswarankoil &
K. Kannan
D.B.T.R. National Hr. Sec. School-Mayiladuthurai.
but when you find this file in a Drive, Hard Disk Drive or Removable
drive (USB Flash Disk Drive), where there are no Setup.exe for an
installer, then it is definitely a file created by Computer Worm
or Computer Virus, that when you autoplay it and execute the
autorun.inf, then the Worm or Virus will be triggered and then
it activates.
use Avast! Antivirus (Avast! Home Edition - free - should be
sufficient. then use Avast boot scan.
Microsoft affiliated Antiviruses like AVG, Avira, McAfee,
Norton Symantec, ESET NOD, Panda and other
microsoft affiliated antiviruses only slows down your system
and they are the ones giving your computer a Malware.
If after deleting autorun.inf, and you still don't see your files,
that is because the viruses did somethings in your file,
like it made your files Hidden (it's a file property).
Viruses/Worms make your files:
- Hidden files
- System files
after deleting autorun.inf and the virus/worm from your computer,
this doesn't show your hidden files. because it is an effect
that the virus did to your files.
to see your files, go to Folder and Search Options.
Or if you have a Menu bar, go to Tools>Folder Options.
a dialog box pops out, go to View tab.
choose the "Show hidden files, folders, and dirves" option...
then uncheck the boxes
- Hide extensions for known file types
- Hide protected operating system files (Recommended).
after doing these steps, then you'll be able to see your hidden
files that your previous worm/virus did to them.