How to remove autorun.inf and prevent virus spreading and infection

Disable your autorun. This is very significant in protecting your computer against online threats. A lot of viruses today uses the autorun.inf file to spread themselves and infect your computer. Autorun.inf contains a command that instructs the computer to run a specific file usually on a CD/DVD disc. In genuine cases , it runs a setup in case of a software installation disc. In the other case it may run a virus and gets your system infected. Same is the case for Mass Storage Devices such as Memory Sticks and Flash Drives. Autorun.inf is typically used by CD Installers to autoplay their installations, but Hard disks by default should not have AUTORUN.INF in the drive.

autorun1

As you can see from the above image the Drive D: contains a hidden file autorun.inf. This a possibility that drive D: is infected with virus and the autorun.inf file may contain a instruction to spread the virus whenever you double click drive D:. To remove this, Restart your windows into Safe Mode with Command Prompt. On drive D and all other root directories type the following commands:

1. attrib -h -r -s autorun.inf

R Read-only file attribute.
S System file attribute.
H Hidden file attribute.

2. del autorun.inf

Repeat these steps for all of the other drives root’s directories to disable autorun.inf .

How to disable AUTORUN from Registry

Here are the steps to disable autorun via registry. But before doing anything as a safety measure always backup your registry.

  • Go to start –> Run –> Type Regedit
  • Look for the HKEY_CURRENT_USER\Software\ Microsoft\Windows\CurrentVersion\Policies\Explorer as shown below:

  • Double-click the NoDriveAutorun DWORD entry and type the value HEX: FF (255 in Decimal).
  • If the NoDriveAutorun does not exists, you can create it by right-clicking the right side area of the regedit window, then click New–>DWord Value –> type NoDriveAutorun.
  • Close the registry and restart the computer. This procedure will disable all the autorun for all drives of your computer and should prevent the autorun function of infected USB drives or CDs and avoid the infection of viruses.
SHARE THIS ARTICLE
  • BlinkList
  • del.icio.us
  • Digg
  • Facebook
  • LinkedIn
  • Mixx
  • Reddit
  • StumbleUpon
  • Technorati
  • Twitter

Related posts:

  1. How to Remove Worm MyMP3.vbs
  2. How to remove SCVHOST.exe (W32/YahLover.Worm.gen or Win32/Autorun.R.worm)
  3. How to Remove Virus from USB Device
  4. How to remove TAGA LIPA ARE! Virus
  5. How to Remove JAY.EXE and MVEO.EXE Virus
  6. How to remove FUN.XLS
  7. How to Remove Huelar.exe (mscvhost.exe, winlogos.exe) virus
  8. How to remove Taga Xpress On Kami
  9. How to remove W32:Navidad (Navidad.Exe)
  10. How to Remove Happy99.exe (ska)

TAGS: , , , , , , , , , , , ,

12 Comments

  1. Sagar says:

    You got a really worderful blog with interesting topic.. I’d few problems which i solved using your tips.. But it would be nice if you another article on “how to see hidden files option even after the virus attack” .. Nowadays its really a major problem where you cant see any of your hidden files even by going to folder options of window menu.. Pls put a related article to this problem..
    Thank you
    sagar
    india
    http://www.Reviewtechz.site40.net

    http://www.Freetemplates4u.co.cc

    http://www.todaysgadget.blogspot.com

  2. Sly says:

    Thanks for the tip… Autorun is a nuisance on top of the drawbacks that you mentioned.

    Sly´s last blog post..Funkatronic

  3. slavezero says:

    @sagar

    thanks for the appreciation.

    if windows doesn’t allow you to view hidden files you can view hidden files using the dos command dir /ah (this will show any files that has a hidden attribute)

    [drive][location]dir /ah

    ex. c:\dir /ah

  4. slavezero says:

    @sly

    thanks :)

    virus creators are looking for new ways to spread their work

  5. Deyaa Addeen Fahmy Shedeed says:

    appreciate, thanks.

  6. pao says:

    how about HEUR.Trojan.Win32.Generic???

    help coz my cmputer is on the risk

  7. jhunaxes says:

    why is it everytime I open my folders I see files name… desktop.ini…..and even I set folder options to hide files it will back to show hidden files…. please help me

  8. thank for this site it help a lot….. i hope you will continue in posting your idea’s and helpful tips on how to maintain a good PC performance and maintenance …. keep up the good work…thank again…

    Kelsey Assmaria’s last blog post..Bat Wedding

  9. slavezero says:

    Remove it using Avast… don’t bother using kaspersky it won’t work

  10. slavezero says:

    Go back to Folder options and put a check on “Hide protected operating system files (recommended)

  1. PCRemiX :: PC Tips and Tweaks
  2. How to Protect yourself against Conficker Worm | Kawula Muda Kebokuning

Leave a Comment


CommentLuv Enabled

Spam Protection by WP-SpamFree