Jun 2, 2008

How to get rid of autorun.inf from pen drives or hard disk

Hi friends,
Today the cyber world is experiencing some serious problems. especially with the fast spreading trojans,viruses and scripting programs. We too have seen our college computers flodded with such trojans and viruses and these spread to our home computers via pen drives. And the worst part is that despite having good anti virus softwares installed at our placed, they failed to delete such files.

The crux f this problem lies in the autorun.inf or autorun.exe that executes secretly as soon as we open our hard disk or plug in our infected pen drives. These are normal files which help to create som tojans or viruses as the case may be and hence anti-viruses ignore them. Examples of files created by running of such files are 3xxx.cmd,t.com, i.com, VirusGuard.vbs MicrosoftPowerpont2007.exe and so on. So if today you open your hard disk drive or pen drive and found that your anti- virus software is detecting such files then beware these can spread to entire system.

To find out whether autorun.inf file exists in your system, go to dos prompt or command prompt (using CMD) and whichever drive you feel is infected, go to that drive. just press tab key and see if autorun.inf name appears. If it does appear then using edit autorun.inf try to figure out the name of files that it creates . After exitting the editor you can further use tab key to find all such files in your drive.

Once you have analyzed the drive, type the following to commands:

Attrib -h -s -r autorun.inf
del autorun.inf

Attrib -h -s -r autorun.exe
del autorun.exe

And then verify that they are gone by using dir /ah command.

Use the same commands with all filenames that you saw in the editor like
Attrib -h -s -r VirusGuard.vbs
del VirusGuard.vbs

In this way you can get rid of such hidden threats. For some viruses you might ned to restart PC as well.

Well this is a general solution though some good anti viruses like nod, quick heal etc can do that itself...

So just clean your PC and spread the solution for this problem to all.


Anjul Sahu said...

Thanks for sharing the solution, It will be useful to many victims.
Keep writing...

[b]Another Tip:[/b]
Use your Live CD of Linux to open the portable drive and delete unwanted AUTORUN.INF and AUTORUN.EXE etc files.

Rex said...

There are many threats to your data other than stealing. You can secure your data by using Lok-it Usb Drive