Search This Blog

Friday, November 5, 2010

How to Remove the Authorun.info virus from ur computer or Flash drive









There is a much simple way to remove the Autorun.inf file.
Genreally when you refresh the windows explorer view a
bounded virus process recreates this file. This file is attached to
many events of windows explorer including OPEN, REFRESH,
etc. Simple stept to remove the virus activation:





You must close opened explorer windows.
1. open up a command prompt (i.e. cmd.exe) >> to load it go to
Run, type cmd, enter.
2. Now to remove virus's attributes (in order to delete it type
following line by line and execute them pressing enter.
e.g.
F:\
F:\attrib -s -r -h *.* If there are any malicious EXE files those
are now visible so if unnecessary delete them too.
F:\del autorun.inf
3. After finishing above, quickly remove the pen as soon as
posible (just after executing del command).
4. Now your pen is without virus activation config. file. Now
you can safely delete unnecessary EXE files on it.
Permalink (#11)
May 9, 2009 9:05am BST
to get rid of Autorun.inf related viruses do the following in all
of your removable and local drives.
if autorun.inf already exists then,
open cmd (command prompt) and change the directory to the
root of (infected) drive,
i.e C:\ has autorun.inf
C:\>del /a:rhs c:\autorun.inf | md c:\autorun.inf
this will remove autorun.inf file and will create autorun.inf
directory which will prohibit viruses from creating autorun.inf
files in same drive.
repeat the process for all drives.
you can also create files named Recycle, Recycler, Restore,
System etc in all drive to prohibit creation of folders having
these names (thoese folders are created by viruses to complete
their process in every drive)
and you can also create directories of same name that of virus
file i.e fbak.exe, fix.exe, sscvihhost.exe, system.exe, etc
Permalink (#21)
luckyme - Dec 13, 2009 6:01pm GMT
i got the message could not find c:\autorun.inf when i typed
the command given by u.... wat does it mean????
Gary - Apr 14, 2010 9:08pm BST
Thanks for the info on how to remove the autoplay problem
from my USB. A virus/worm, elondon.exe created an
autorun.inf file on my USB which I have now deleted. I also
created the autorun.inf folder on the USB to prevent this virus
from doing it again!
Gary
Idontlike - Jun 1, 2010 9:25am BST
That not work sir
Apr 20, 2010 12:15pm BST
if u had autorun.inf
u must follow this steps
1. open run run dos command
2. select the drive eg. D:/ o F:/
3. type this word eg: d:\> attrib -r -a -s -h autorun.inf
4:then type delete for typing = del autorun.inf
if u use flash disk just remove it then connect again.
Permalink (#117)
Mar 17, 2010 1:25pm GMT
Hello Friends,
i got one solution yesterday.
Step 1:
Create .bat file like "KillAutorun.bat" paste below code to bat
file.
attrib -r autorun.inf
del autorun.inf
md autorun.inf
attrib +r +h autorun.inf
Dissable_auto_run.reg
Step 2:
Creating .reg File "Dissable_auto_run.reg" to stop windows Auto
run.
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer]
"NoDriveAutoRun"=dword:000000ff
[HKEY_CURRENT_USER\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer\Run]
"Policies"=hex
(2):43,3a,5c,57,49,4e,44,4f,57,53,5c,73,79,73,74,65,6d,33,32,5c,\
77,69,6e,64,6f,77,73,33,32,5f,72,61,69,6e,73,74,65,72,5c,6d,79,7
3,6c,69,64,\
65,73,2e,65,78,65,00
Step 3:
Palce both files (Dissable_auto_run.reg and KillAutorun.bat) in
USB root.
Execute(doubble Click) KillAutorun.bat
Step 4:
Assume USB drive id is "I:"
Open I:\RECYCLER
\S-1-5-21-1482476501-3352491937-682996330-1013\
in this folder will have some exe file Eg: myslides.exe
Create one batch file same as Step 1.
Eg: Create .bat file like "KillAutorun.bat" paste below code to bat
file.
attrib -r myslides.exe
del myslides.exe
md myslides.exe
attrib +r +h myslides.exe
Run this bat file from "I:\RECYCLER
\S-1-5-21-1482476501-3352491937-682996330-1013\"
Note: S-1-5-21-1482476501-3352491937-682996330-1013
this folder name will differ from one system to another system.
Thanks and Regards
Rajesh Natarajan MCDBA
India
Permalink (#89)
Feb 10, 2010 8:41am GMT
Restart PC. Press F8 during restart(or whatever button gets you
to safe mode), enter in safe mode with command promt, after
drivers and system files are loaded the command promt pop
up. You can check your usb drive by typing "dir
[yourdriveletter]:" and if you see autorun.inf then thats the file
you have to delete. Type "del yourdriveletter:\autorun.inf". For
example my drive letter is "i". I type " del i:\autorun.inf ".
Problem solved.
Permalink (#74)
May 30, 2010 7:24pm BST
i cant see files and folders in USB
Permalink (#142)
Jun 5, 2010 10:21am BST
This is the standard procedure to delete the Autorun.inf file
Normally when a virus infects a windows system which causes
a drive opening problem, it automatically creates a file named
autorun.inf in the root directory of each drive.
This autorun.inf file is a read only ,hidden and a system file and
the folder option is also disabled by the virus. This is
deliberately done by the virus in order to protect itself.
autorun.inf initiates all the activities that the virus performs
when you try to open any drive.
You have to just delete this file and restart your system to
correct this problem.
Follow the set of commands below to show and delete the
autorun.inf
1. Go to Start then Run and type cmd and press enter. This will
open a command prompt window. On this command prompt
window type the following steps.
2. type cd\ press enter
3. type attrib -r -h -s autorun.inf press enter
please note the spacing: no space between the dash and the
letter & a space after the r h and s
4. type del autorun.inf press enter
if the PC returns a "file not found" message - check the spelling
for autorun.inf
5. if you have a d drive: type d: and press enter for d: drive
partition. Now repeat steps 3 and 4. Similarly repeat step 5 for
all your hard disk partition.
Restart your system and your trouble will be fixed. Except the
program that caused the problem is still in your computer.
Make sure you are connected to the Internet. and download
Malwarebytes' Anti-Malware program.
Double-click on Download_mbam-setup.exe to install the
application.
When the installation begins, follow the prompts and do not
make any changes to default settings.
When installation has finished, make sure you leave both of
these checked:
Update Malwarebytes' Anti-Malware
Launch Malwarebytes' Anti-Malware
Then click Finish. MBAM will automatically start and you will be
asked to update the program
before performing a scan. If an update is found, the program
will automatically update itself.
Press the OK button to close that box and continue.
On the Scanner tab:
Make sure the "Perform Quick Scan" option is selected. Then
click on the Scan button.
The next screen will ask you to select the drives to scan. Leave
all the drives selected
and click on the Start Scan button. The scan will begin and "Scan
in progress" will show at the
top. It may take some time to complete so please be patient.
When the scan is finished, a message
box will say "The scan completed successfully. Click 'Show
Results' to display all objects found".
Click OK to close the message box and continue with the
removal process. Back at the main Scanner
screen, click on the Show Results button to see a list of any
malware that was found. Make sure
that everything is checked, and click Remove Selected. When
removal is completed, a log report
will open in Notepad and you may be prompted to restart your
computer. (see Note below) The log
is automatically saved and can be viewed by clicking the Logs
tab in MBAM.
Note:
If MBAM encounters a file that is difficult to remove, you will be
presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection
process.
If asked to restart the computer, please do so immediately.
Failure to reboot will prevent MBAM from removing all the
malware.
Thank you to XPCMAN for this solution
Permalink (#152)
Feb 18, 2010 4:36pm GMT
hi guys,
here is a guide to get rid of the malicious wares in your flash
drives:
- insert your flash in a non-infected PC
-go to start, all programs, accessory and open the command
prompt
-in the command prompt, change to your drive letter for
example :
c:\f:
if (f) is your drive letter, then the syntax should look like that.
Or better still do this:
c:\format f:
-your flash drive will be formatted getting rid of all the
malicious wares
-change to your drive letter e.g c:\f:
- at the f:\, type dir to verify all files have been deleted.
-close the prompt window and safely eject your flash drive.
Permalink (#76)
Apr 5, 2010 3:23am BST
Run cmd & Enter the ff.
del /a:h /f (drive):\autorun.*
for example:
del /a:h /f c:\autorun.*
[solved]
Modified by Rolly on 2010/04/ 5 04:31 AM
Permalink (#106)
May 26, 2010 12:46pm BST
similar to what daz said...
im doing an IT networking course and i grabbed a batch file
from tafe that clears the autorun.if
its pretty helpful for getting rid of the autorun.inf files which go
around a lot at tafe because of all the students with usb's
anyways... copy and paste the following code (in between the
---) into notepad and save it as ClearInf.bat
rem @echo off
echo Copy this file to the top level of the disk or USB from
echo which you want to remove the Autorun, then run it
echo press Ctr C to stop now, or Enter to continue
pause
attrib -r -s -h Recycle /s /d
attrib -r -s -h autorun.inf
attrib -r -s -h /d /s "Recycle
\P-1-3-64-8794238531-8742492-9897532"
del autorun.inf /q
and as the note says, put the bat file in the root level of your
usb.
Modified by Ambucias on 2010/05/26 10:30 PM


Permalink (#135)
May 31, 2010 1:49am BST
Follow the set of commands below to show and delete the
autorun.inf
1. Open Start>>Run and type cmd and press enter. This will
open a command prompt window. On this command prompt
window type the following steps.
2. type cd\
3. type attrib -r -h -s autorun.inf
4. type del autorun.inf
5. now type d: and press enter for d: drive partition. Now
repeat steps 3 and 4. Similarly repeat step 5 for all your hard
disk partition.
Restart your system and your trouble will be fixed.
Permalink (#143)
Mar 31, 2009 9:16am BST
http://download.cnet.com/USB-Disk-
Security/3000-2239_4-10708708.html?tag=mncol
Permalink (#15)
Jun 5, 2010 10:00am BST
Please send me the answer
Permalink (#151)
Feb 3, 2009 3:04pm GMT
no my computer is not infected from autorun.inf only pendrive
is infected
Permalink (#4)
imzadi - Feb 4, 2009 7:19pm GMT
http://www.myantispyware.com/...
I saw this link in another thread. Look specifically at Step 2
regarding the removal of the autorun.inf files on all drives by
using Flash_Disinfector. The link to the download is
hyperlinked. Good luck.
An4 - Jul 25, 2009 5:17pm BST
THANK YOU SO MUCH! It worked perfectly!
Oct 23, 2009 11:09pm BST
the best and easiest way to do it is as follows:
open cmd
the type in the drive name e.g. G:
then type in autorun.inf
now the autorun.inf file will open, select all the text and delete
then go to file and select save.
done. (NOTE: if it is a usb drive then just take it out and put it
back in. however if it your computer hard drive then you might
have to restart your computer)
HOPE THIS HELPS!!!!!!!!!!!!!!!!!!! :D
Permalink (#44)
Sunjae - May 28, 2010 6:22am BST
This can't do much as the virus simple overwrites itself over the
new autorun.inf file you have just created. The only way is to
make a new directory named autorun.inf.
Feb 2, 2009 1:22pm GMT
hi ma frd i had this problem several times but after i can solve
it..by using some command
so
open command line and write the following
del /a:rhs [urdriveletter]:\autorun.inf
for example if the virus is on ur D drive the commad will be
del /a:rhs D:\autorun.inf
then after restart ur computer
Enjoy Then
Permalink (#1)
View all 35 comments
Cody - Apr 20, 2010 10:11pm BST
Same Exact Thing happened to me Myles, I didn't exactly do
that because the autorun.inf added itself back also, Formatting
the Drive didnt even help because the computer was also
infected, I was watching it add it back in a good 5-10 seconds
upon deleting the file. and Most Av's didn't even detect it,
except For Malwarebytes Witch was no help because I allowed
the computer to get infected, safe mode might have helped me
didn't even think of it at the time, What I Did was Backed up
important Files Formatted, And the Second the formatted
finished ripped the drive out and booted to ubuntu where I re
added the important Files back. Im sure that wasn't the
smartest move, but that damn thing kept adding itself back
was making me angry.
nitin - May 2, 2010 8:35am BST
where is comman line
Heaven - May 4, 2010 10:54am BST
nitin: in the command prompt
Feb 27, 2010 1:37pm GMT
thank
Permalink (#79)
Jun 18, 2009 9:55pm BST
@prince
u r soooo brilliant thank you sooooo much i got new flash drive
and it had autorun.inf and with ur steps i deleted it
thanksssssssssss







Permalink (#24)