Security Software [HELP] Autorun.inf...anywhere and everywhere

[raksrules]

I am facing this virus problem (i think). On whatever external media i insert avira says autorun.inf is detected and displays the message as follows

The problem is that it detects the autorun.inf in all external media connected to the laptop. I just connected my new sansa clip+ and it gave me this warning. Avira does not delete or quarantine it. I am not able to manually delete it either.

I just attached a memory card which i am using for the first time since last 10 months and that too is giving the same warning.

 

[kekerode]

not big issue ... just run any linux live cd and delete autorun.inf file from those devices.

 

[logistopath]

Boot into safe mode, and run this at command prompt:

attrib -r -s -h autorun.inf

Change directory in command and run the above for each partition/device. It will make all autorun.inf files as non-read only, non-hidden, non-system file so that you can easily delete these files from each partition and device.

Now, create a folder in each partition and device and name the folders as autorun.inf. Make this folder as a hidden folder and do not delete it. This will make sure that autorun.inf does not infect your devices/PC any more.

 

[raksrules]

I do not have an optical drive in my laptop (it is a netbook) so booting through that option is ruled out.

 

[amit199013]

if you have ultraiso installed then u can use it to delete those files...

otherwise method sugested by hp-india is best

 

[kekerode]

I am sure u would have USB slot at least ... refer this for creating LiveUSB for ubuntu for example -- Creating A Bootable Ubuntu USB Thumbdrive From Windows With uSbuntu Live Creator | HowtoForge - Linux Howtos and Tutorials

Of course you can delete the file from safe mode too ... no matter what way u choose ... also get rid of possible executables and script files mentioned in those autorun.inf files

 

[Rockfella]

If nothing works run combofix!

 

[cisco_tech]

Download the EssUSBAppz. Very handy and useful. Just google it.

 

[CA50]

Copy these following code to notepad and save as a *.bat file with any name. then run the batch file. Better run it in safe mode.

Next create folders in all the partition by name autorun.inf and use USB Disk security to avoid further infection

http://www.zbshareware.com/setup.exe

Also install avast and update it, then install the whole pc at boot time mode.

@echo off
cls
title   ~CA~`s AUTORUN.INF FINDER N DELETER ver 0.0a 
color E
echo.
echo.
echo.
echo.
echo.
echo.
echo            @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
echo            @***********************************************@
echo            @***@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@***@
echo            @***@                                       @***@
echo            @***@  ~CA~`s AUTORUN.INF FINDER N DELETER  @***@
echo            @***@                                       @***@
echo            @***@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@***@
echo            @***********************************************@
echo            @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
echo.
echo.
echo.
echo.
echo.
echo.
echo.
pause 
color 6

cd\
c:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

D:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

E:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.
F:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

G:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

H:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

I:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

J:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

K:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

L:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

M:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

N:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

O:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

P:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

Q:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

R:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

S:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

T:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

U:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

V:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

W:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

X:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

Y:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.

Z:
attrib -H -S -R autorun.inf
del autorun.inf
attrib -H -S -R ntde1ect.com
del ntde1ect.com
echo.
echo.
echo.
pause