Autorun.inf appears and shortcut of the flash drive [Solved/Closed]

deanil vincent 16 Posts Tuesday March 19, 2013Registration date June 1, 2013 Last seen - Mar 19, 2013 at 07:20 AM - Latest reply:  KAshat
- Feb 10, 2015 at 09:49 AM
Hello,
Help me sir/mam to remove the virus from my laptop

Good day mam/sir. I'm so worry about my laptop. I think it has a virus but I don't know what and why it happens.

My problem is, When I insert a pen drive(flash drive) on my laptop, it appears the autorun.inf and shortcut of the flash drive. My folder and files is inside of that shortcut drive.

Help me sir to remove that annoying virus that ridiculing my laptop



Jesus Is My Life
See more 

13 replies

Best answer
jack4rall 6505 Posts Sunday June 6, 2010Registration dateModeratorStatus December 30, 2015 Last seen - Mar 19, 2013 at 07:37 AM
4
Thank you
Hello,

Try this 1

Follow all the steps given below

1) Disable the "Autoplay" feature. Click on the below link "Disable Autoplay",

and download the file --> Double-click on it and follow the instructions.

Disable Autoplay

2) Disable the "Autorun.inf". Click on the below link and follow the instructions.

First backup your registry. Click on Start --> Run --> Type regedt32 and press

Enter. "Registry Editor" will be opened.

( If you are using Windows 7, Start --> In search bar--> Type regedt32 and press

Enter.)

Now backup your registry by going to "File --> Export" --> Save the file with any

name in your desired location.

Copy the text starting from "REGEDIT4" upto @="@SYS:DoesNotExist"

REGEDIT4      
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]      
@="@SYS:DoesNotExist"  

Open a "Notepad" --> Paste it --> Save the file as fix.reg

Note: Don't forget the extension "reg"

Now double-click on the fix.reg file and then click on "Yes" to merge it,

[Note : After following the above instructions, whenever you place any autoplay

CD\DVD all you have to do is go to "My Computer" --> Open the CD\DVD drive

--> You have to double-click on the setup file.]

3) Click on the below link and download the file "AutorunExterminator"

http://ccm.net/download/download-11613-autorun-exterminator

Extract it --> Double-click on "AutorunExterminator" --> Plug your Pen drive

now. This will remove the autorun.inf files from drives and and also from your

Pen drive.

[Note : AutorunExterminator need Dot Net Framework. If its not installed in

your laptop then click on the below hyperlink ".NET Framework" and download it

.NET Framework

4) Click on "Start" -->Run --> Type cmd and press Enter.

"Command Prompt" will be opened.

Here I assume your pen drive letter as G:

Enter this command.

attrib -h -r -s /s /d g:\*.*

You can copy the above command --> Right-click in the Command Prompt and

paste it.

Note : Replace the letter g with your pen drive letter.

Now check for your files in Pen Drive.

5) After that, download the Malwarebytes' Anti-Malware from the below link

http://ccm.net/download/download-105-malwarebytes-anti-malware

Update it --> Perform "Full Scan"

Note : Default selected option is "Quick Scan".

Good Luck.

Thank you, jack4rall 4

Something to say? Add comment

CCM has helped 1893 users this month

tanx a lot sir..worked
Is there any way to prevent it from entering your flash drive? Example, the flash drive is inserted into a friends laptop and that PC has autorun.inf, can you create something in your flash drive to prevent that to enter your flash drive. Just curious.
thanks.
it worked.
Symptoms: The worm creates shortcuts for any files and folders placed onto the USB drive and makes the original files invisible.
The created shortcuts point to the following path:
C:\Windows\system32\cmd.exe /c cls&cls&cls&cls&cls&cls&cls&start weiche.JPG&cls&cls&cls&cls&cls&cls&start iexplore.vbs&cls&cls&cls&cls&cls&cls&exit
Anti-Malware tried: I ran a scan with the following tools, none of them detected the worm:
Microsoft Security Essentials
Malwarebytes
Hitman Pro
ADWCleaner
TDSSKiller
Norton Power Eraser
Microsoft Safety Scanner
Solution:
Kill wscript.exe in task manager
Remove iexplore.vbs from startup (it created three different entries)
Make files on USB drive visible: Open cmd, type attrib -h -r -s /s i:\*.* (with i: being your drive letter)
Delete those files on USB drive and format just to be sure
Go to C:\Users\{user}\AppData\Roaming\Internet Explorer\ and delete it. The folder seems to be empty but inside sits iexplore.vbs
Good luck.
deanil vincent 16 Posts Tuesday March 19, 2013Registration date June 1, 2013 Last seen - Apr 3, 2013 at 03:57 AM
1
Thank you
Thanks a lot sir. My laptop was okay now. and no threats to be fear of. God bless and thanks alot sir again :D
i have the same problem & followed the same steps as above but it didnt go from mine pls help me
Thanks A Lot Bro. It really Works mty data has been recovered..
this man is just the most awesome guy I had ever seen....with such a simple way as he described briefly he made the work easier as it wasnt at all....so thanks alot bro god bless u and hope u help other guys like this only....Super Thanx MATE THANX A TON!!!
one doubt, I have installed autorunexterminator ,then I plug my pendrive ,and maximized that autorunexterminator,in that it is showing 265 aurun.inf found,and still it is counting.....does it mean 265 and more autorun are there in my pendrive .......Auto Run Exe delted only one......
0
Thank you
it works.
thanks a ton. :)