Prevent and remove autorun virus from USB drive, hard disk


Autorun virus, as the name suggests it uses the Autorun.inf feature in the Windows Os that is used for launching the programs that are stored in the removable media such as DVDs, USB Devices, CD ROMs, as well as Memory Sticks.
If there is autorun.inf virus in USB drive, each time you insert the removable media and double-click your drives to open it, virus files begin executing and infect your computer: which spreads itself onto the computer by making the multiple copies of the autorun.inf and .exe files on every drive of your computer.
When your computer is infected, viruses might clandestinely connect to the malicious web site and install the key logger on your PC. the key logger steal all your private information like usernames, account numbers, social security, passwords, credit card information, as well as other sensitive information. It is thus very important for you to remove the Autorun virus from computer
Below is a guide to delete the autorun.inf virus manually, Manual removal of the Autorun.inf virus is suggested just to computer experts as removing and editing the windows registry may cause you severe damage to the system.

Removal instructions

Remove autorun.inf virus on USB drive

  1. plug the USB drive into your computer, a window dialogue may appear, don’t click on Ok , just choose ‘Cancel’.
  2. Go to command prompt and type your USB drive letter.
  3. Type dir /w/a and press enter, this will display a list of the files in in your flash drive. Remove the files: Ravmon.exe, ntdelect.com, New Folder.exe, kavo.exe  svchost.exe, autorun.inf  If you find them.
  4. To delete the virus just type del and the filename example. F:\del autorun.inf and hit enter.
  5. Run a antivirus scan on your USB drives just to make sure that all threats are removed successfully

Delete autorun.inf on hard drive of computer

  1. Boot your system in the safe mode and then open a command prompt.
  2. Delete the following files:
    %System%\config\csrss.exe
    %WinDir%\media\arona.exe
    %System%\logon.bat
    %System%\config\autorun.inf
    C:\autorun.inf
    D:\autorun.inf
    E:\ autorun.inf
    F:\autorun.inf
    autorun.inf files in all drives.
  3. Open the registry editor and delete following parameters:
    [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    DisableTaskMgr = 1
    [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
    NoFolderOptions = 1
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
    "Worms" = "%System%\logon.bat"
  4. Reboot your computer

    See more information about Win32.AutoRun.
The method for removing autorun virus above is useful for some types of simple autorun viruses. If the autorun.inf come back again after removal and reinstall itself onto flash drive or local drive, even the antivirus could not detect it, that means the you have infected a new variant virus, which is unable to be removed manually.
In this case, you need to use the effective autorun removal tool.

Using Autorun Removal Tool

Autorun Virus Remover is not a common product like other antivirus products in the market, it focus on solving the autorun virus problem completely.
  1. Remove 2000+ types of autorun viruses permanently, easily and quickly
  2. Prevent any viruses from infecting PC via USB drive
  3. Recover hidden files and folders on root of hard disk and USB drive
  4. Fix system, registry errors caused by viruses
For 6 year experience on analyze and solve autorun.inf virus problem, We develop advanced antivirus engineer which can detect and remove autorun virus effectively that may be ignored by other antivirus product.  Virus samples from users all over the world are collected and analyzed to improve our product constantly, to make sure that it can detect and get rid of  all kind of autorun viruses .
Also, Autorun Remover prevent any attack from USB port, before opening the external USB device, the autorunantivirus would execute an indepth scan of files on USB automatically to keep it safe.
Our product can not only remove the virus, but also fix system errors caused by viruses at the same time, we provide full threat removal and repair solutions for our clients.
With our product, you can solve the autorun.inf virus problem in 3 minutes.
 
Free Download Virus Removal Tool Now

Steps

Method 1

  1. 1
    Open command prompt. Go to Windows, then Run, and type "cmd" . Press enter.

  2. 2
    Type "cd\" and press enter to get to the root directory of c:\ .

  3. 3
    Type "attrib -h -r -s autorun.inf" and press enter.

  4. 4
    Type "del autorun.inf" and press enter.

  5. 5
    Repeat the same process with other drives, type "d:" and do the same thing. Then next "e:" and restart your computer.

  6. 6
    Restart your computer and it's done. Enjoy the freedom to open hard drives on a double click.

Method 2

  1. 1
    Go to any folder.In that on the top menu go to Tools--> Folder Options, which will be beside File, Edit, View, Favourites.

  2. 2
    A window pops up after you click on folder options.In that window go to View tab and select the option Show hidden files and folders.Now uncheck the option Hide protected Operating system files. Click "OK".

  3. 3
    Now Open your drives (By right click and select Explore. Don't double click!) Delete autorun.inf and MS32DLL.dll.vbs or MS32DLL.dll (use Shift+Delete as it deletes files forever.) in all drives include Handy Drive and Floppy disk.

  4. 4
    Open folder C:\WINDOWS to delete MS32DLL.dll.vbs or MS32DLL.dll (Use Shift+Delete )

  5. 5
    Go to start --> Run --> Regedit and the Registry editor will open

  6. 6
    Now navigate in the left pane as follows: HKEY_LOCAL_MACHINE --> Software --> Microsoft --> Windows --> Current Version --> Run .Now delete the entry MS32DLL (Use Delete key on keyboard)

  7. 7
    Go to HKEY_CURRENT_USER --> Software --> Microsoft --> Internet Explorer --> Main and delete the entry Window Title “Hacked by Godzilla”

  8. 8
    Now open the group policy editor by typing gpedit.msc in Start --> run and pressing enter.

  9. 9
    Go to User Configuration --> Administrative Templates --> System . Double Click on entry Turn Off Autoplay then Turn Off Autoplay Properties will display.Do as follows:

    • Select Enabled
    • Select All drives
    • Click OK
  10. 10
    Now go to start --> Run and type msconfig there and press Enter.A system configuration utility dialogue will open.

  11. 11
    Go to startup tab in it and uncheck MS32DLL .Now click Ok and when the system configuration utility asks for restart ,click on exit without restart.

  12. 12
    Now go to Tools --> Folder Options on the top menu of some folder again and select the Do not show Hidden files and check Hide operating system files.

  13. 13
    Go to your recyclable bin and empty it to prevent any possibility of MS322DLL.dll.vbs lying there.

  14. 14
    Now restart your PC once and you can now open your hard disk drives by double clicking on them


EditTips

  • Sometimes "cmd prompt" returns an error "file not found autorun.inf, sometimes some of your hard drives might not be containing the autorun.inf file, so leave those drives and try the next ones.

EditWarnings

  • After deleting the file from all of your hard drives, immediately restart your computer. Don't try to open your drives by double clicking before restarting the machine otherwise you'll have to repeat whole of the procedure again.



_________________________________________________________________________________

Files on flash drive changed to shortcuts

August 2013

A virus infected flash drive can definitely create trouble. It is possible a virus in the flash drive could alters the names of the files to shortcuts. In this condition it becomes difficult to view files even after the virus is eradicated. This problem can still be tackled. If the flash drive is not formatted, then files must have been stored in the hardware in hidden mode. To retrieve the file, the correct procedures must be followed. 

Files on flash drive changed to shortcuts


Issue

I caught a virus on my flash drive at work and it appears to have changed all my file names to short cuts. I believe I've cleaned the virus but how do i get my files back so that I can view them? 

Solution

If you did not format your flash drive, then check whether the files are in hidden mode. Then follow these steps:
  • Click on the link below and download the file "AutorunExterminator":
  • Extract it: Double-click on "AutorunExterminator"
  • Plug your pendrive now
    • This will remove the autorun.inf files from your pendrive and also from the drives
  • Click on Start > Run, type cmd and click OK
  • Here it is assumed your pendrive letter is G (change as necessary)
  • Enter this command.
    • attrib -h -r -s /s /d g:\*.*      
  • Press Enter
  • Now check for your files in on the pen drive
  • Now download the Malwarebytes' Anti-Malware from this link:http://en.kioskea.net/download/download-105-malwarebytes-anti-malware
  • Update it and perform a "Full Scan"
    • Note : The default selected option is "Quick Scan"

Comments

Popular posts from this blog

VITZ “INSERT MAP CD” SOLUTION

Make ready your horses !

Halal and Haram in Chocolates and Ice Creams