Removing Autorun.inf Virus Manually

@prajnith (941)
India
September 12, 2008 3:49pm CST
To Remove autorun.inf based virus,open command prompt (type cmd in Run found on Start Menu), type cd\ and hit enter, Now type ATTRIB -A -H -R -S autorun.inf and Hit enter then type del autorun.inf and Hit enter then type MD autorun.inf and Hit enter thats it, again that virus wont be able to create autorun.inf file. similarly do it for other drives to go to D drive type d: in cmd prompt,and repeat previous procedure. To remove Autorun.inf totally you 've to even remove from registry, type regedit in run menu (press winkey + R or click on run found on Start Menu if vista just type regedit on start search) go to-- HKEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\Policies\Explorer Double click the NoDriveAutorun DWORD entry & type the HEX value FF Now Reboot If This Method Does Work , Same Procedure Has to be followed in Recovery Console. To Perform in RECOVERY CONSOLE, Insert Bootable Windows cd & boot into cd, After Initialization process you will be Asked to Press Enter for Setup Or R to Repair, Press R, You Will be Taken To Recovery Console Similar to Ms-Dos prompt, Then You have to follow Procedure below 1) Type 1 to select Your OS (Default C Drive) 2) Then type admin password , if not set(default not set) Just hit enter Then Follow Procedure Which Was Stated Above About Removing Virus from Command Prompt.
1 person likes this
6 responses
@ferdzNK (3211)
• Philippines
16 Sep 08
Thanks for sharing this Prahnith, We just have to make sure that no resident program is running in memory related to that virus or else it will just bring it back there when we explore it, a vicious cycle. Unless its a new virus I think updated antivirus are aware of this things already.
@prajnith (941)
• India
16 Sep 08
ya thats true i totally forgot to mention about that. thank you for mentioning. zonealarm failed to remove,shocking but true but even norton 360 failed to detect this may be because i just downloaded the demo and gave scan, so norton might have not detected it, anyway after that i installed Avira and it detected it and was able to remove the virus. thank you for replying and mentioning the stuff i failed to mention.. take care.
1 person likes this
@ferdzNK (3211)
• Philippines
16 Sep 08
Your welcome and congratulation you've reached your 100th post, don't mind much your star it will show its true color someday. Just keep on posting and enjoy it every time.
@prajnith (941)
• India
17 Sep 08
thank you... i find mylot really good for improving our knowledge.. thank you once again for replying ..
@kiranv06 (26)
• India
2 Oct 08
there is a more simple way... u just boot your system using an ubuntu live disk. you can access to your hard drives from the "Computer" icon. Then Use Places"search for files"(You find the places tab on top of the page) and type in the text box "autorun.inf".. the search will trace out any autorun.inf located and u can delete that..by this method, you can acess many other files which is not accesible, either hidden by windows or by viruses....Please see that u want the latest ubuntu Cd-rom for Deleting Files from NTFS drives...
@prajnith (941)
• India
2 Oct 08
ya i have tried out with linux , that virus is linked with registry , so even if you remove that autorun.inf file,next time you boot windows, it gets loaded back again, thats why i create a folder named autorun.inf, so that it cannot re create autorun.inf file, so it cannot run...
@amitavroy (4819)
• India
19 Dec 08
Thank you my friend. And this virus is definitely one of the most annoying virus which you can have on your computer. And to add more it is infected in the lot of computers in my friends have. At the time I pluck my removable drive into their computer my drive gets infected and it takes me a lot of time to clean it at my home. This method is definitely one of the best I personally feel that I have seen and I will have readily followed this method to those friends so that they can even clean up their computer and make life easy for me also.
@prajnith (941)
• India
22 Dec 08
Good to hear that this method was useful to you, yes its the most annoying virus i have faced, my brother's pc was infected by this virus, its took me lots of trial and error to remove the virus finally the above mentioned procedure worked, now most of the antivirus must be able to detect this virus and prevent its from loading to you pc and if u have vista you might get the message that the following program is trying to run when u plug ur pen drive so u can figure out that its a virus as pen drive doesnt have and autorun based application except for sandisk, i personally recommend AVIRA antivirus as it has really good virus detection engine and even quite fast and doesnt slowdown ur pc and best of all its available for free. Thank you for replying.. Have a nice day.. Take care..
• India
8 Dec 08
thanks buddy...... i really need this info....
@prajnith (941)
• India
9 Dec 08
You are always welcome.. Happy myloting.. take care..
@Nadhem (1)
• India
10 Jan 09
u better to go to startup menu and delete them from there or from current_machine- s/w - micro - windows - current version - run wateva u don know jst delete'em
@prajnith (941)
• India
21 Jan 09
well some of virus are located in registry location you specified but there are other softwares which resides in this lcoation too, so we cant blindly delete all the application entries in this .. Thank You replying.. take care.
• India
19 Jul 10
To view methods to remove autorun.inf virus manually visit www.virushunt.com/a/autorun.inf-virus-removal.html