How to remove autorun.inf and prevent virus spreading and infection

Disable your autorun. This is very significant in protecting your computer against online threats. A lot of viruses today uses the autorun.inf file to spread themselves and infect your computer. Autorun.inf contains a command that instructs the computer to run a specific file usually on a CD/DVD disc. In genuine cases , it runs a setup in case of a software installation disc. In the other case it may run a virus and gets your system infected. Same is the case for Mass Storage Devices such as Memory Sticks and Flash Drives. Autorun.inf is typically used by CD Installers to autoplay their installations, but Hard disks by default should not have AUTORUN.INF in the drive.

autorun1

As you can see from the above image the Drive D: contains a hidden file autorun.inf. This a possibility that drive D: is infected with virus and the autorun.inf file may contain a instruction to spread the virus whenever you double click drive D:. To remove this, Restart your windows into Safe Mode with Command Prompt. On drive D and all other root directories type the following commands:

1. attrib -h -r -s autorun.inf

R Read-only file attribute.
S System file attribute.
H Hidden file attribute.

2. del autorun.inf

Repeat these steps for all of the other drives root’s directories to disable autorun.inf .

How to disable AUTORUN from Registry

Here are the steps to disable autorun via registry. But before doing anything as a safety measure always backup your registry.

  • Go to start –> Run –> Type Regedit
  • Look for the HKEY_CURRENT_USER\Software\ Microsoft\Windows\CurrentVersion\Policies\Explorer as shown below:

  • Double-click the NoDriveAutorun DWORD entry and type the value HEX: FF (255 in Decimal).
  • If the NoDriveAutorun does not exists, you can create it by right-clicking the right side area of the regedit window, then click New–>DWord Value –> type NoDriveAutorun.
  • Close the registry and restart the computer. This procedure will disable all the autorun for all drives of your computer and should prevent the autorun function of infected USB drives or CDs and avoid the infection of viruses.
Share and Enjoy:
  • BlinkList
  • del.icio.us
  • Digg
  • Facebook
  • LinkedIn
  • Mixx
  • Reddit
  • StumbleUpon
  • Technorati
  • Twitter

Related posts:

  1. How to remove SCVHOST.exe (W32/YahLover.Worm.gen or Win32/Autorun.R.worm)
  2. How to Remove Virus from USB Device
  3. How to Remove Worm MyMP3.vbs
  4. How to remove TAGA LIPA ARE! Virus
  5. How to Remove JAY.EXE and MVEO.EXE Virus
  6. How to remove FUN.XLS
  7. How to Remove Huelar.exe (mscvhost.exe, winlogos.exe) virus
  8. How to Remove Happy99.exe (ska)
  9. How to remove Taga Xpress On Kami
  10. How to Remove MSBLAST.exe worm virus

Love cooking? Check out healthy recipes at eFoodDepot.com
Plus Size Maternity Clothes
Penny Stock Advice

11 Comments

  1. Sagar (1 comments.) says:

    You got a really worderful blog with interesting topic.. I’d few problems which i solved using your tips.. But it would be nice if you another article on “how to see hidden files option even after the virus attack” .. Nowadays its really a major problem where you cant see any of your hidden files even by going to folder options of window menu.. Pls put a related article to this problem..
    Thank you
    sagar
    india
    http://www.Reviewtechz.site40.net

    http://www.Freetemplates4u.co.cc

    http://www.todaysgadget.blogspot.com

  2. Sly (2 comments.) says:

    Thanks for the tip… Autorun is a nuisance on top of the drawbacks that you mentioned.

    Sly´s last blog post..Funkatronic

  3. slavezero says:

    @sagar

    thanks for the appreciation.

    if windows doesn’t allow you to view hidden files you can view hidden files using the dos command dir /ah (this will show any files that has a hidden attribute)

    [drive][location]dir /ah

    ex. c:\dir /ah

  4. slavezero says:

    @sly

    thanks :)

    virus creators are looking for new ways to spread their work

  5. Deyaa Addeen Fahmy Shedeed says:

    appreciate, thanks.

  6. [...] Remove the USB drive and plug it again. In most cases, the real culprit is  “Autorun.inf” file which gets executed when someone clicks Ok in the dialog window which appears above. Thus the infections can spread. Here is the way to remove autorun.inf and prevent virus spreading and infection. [...]

  7. pao says:

    how about HEUR.Trojan.Win32.Generic???

    help coz my cmputer is on the risk

  8. jhunaxes says:

    why is it everytime I open my folders I see files name… desktop.ini…..and even I set folder options to hide files it will back to show hidden files…. please help me

  9. Kelsey Assmaria (4 comments.) says:

    thank for this site it help a lot….. i hope you will continue in posting your idea’s and helpful tips on how to maintain a good PC performance and maintenance …. keep up the good work…thank again…

    Kelsey Assmaria’s last blog post..Bat Wedding

  10. slavezero says:

    Remove it using Avast… don’t bother using kaspersky it won’t work

  11. slavezero says:

    Go back to Folder options and put a check on “Hide protected operating system files (recommended)

Leave a Reply

CommentLuv Enabled