Autorun.inf virus. Help

X

XecutioneR

Active Member
Joined
Nov 4, 2008
Messages
73
Reaction score
0
Hi all.

Ive discovered that my pc has been infected with an autorun.inf virus that is appearing on all my HDDs. It usually leaves behind an autorun.inf and an exe file that has the computer username.

After removing the files from all drives and rebooting, they come back on some drives. These appear as hidden system files, and the HDD icon changes to a folder icon in explorer.

Im running AVG fully updated, but no virus is found.
Currently trying Avira, which finds the files and deletes them, but after rebooting, their back.

Ive tried googling this virus and found that most anti virus software have trouble with these files, and that it modifies some system files and boot files.

Anyone know how to get rid of these files and fix all the system and registry files?

Thanks
 
Have you run a full scan in safe mode?

If that fails, then you'll need to put that specific HDD into an USB enclosure and scan from another Windows (or Linux) PC in order to remove the bugger.

And system restore must be disabled before doing a full scan otherwise the bugger'll just keep on returning.
 
with each monthly windoze update you get Malicious removal tool click start > Run and type in mrt and enter... do a scan
 
Crude prevention method, once the autorun.inf file is gone create a folder called autorun.inf

Should keep the file from coming back and spreading but you still need to get a better virus removal program to clean your drives. Also turn off system restore because the virus will get backed up in the drives restore folder.
 
i think i got the same report when i plugged my phone into my works computer. i think it was AVG that picked it up.
 
For office I use a mixture of OpenSuSE (internet, downloads and admin tasks) and Windows XP (exchange and other windows-related stuff).

Whenever I need to go on site, I use OpenSuSE, and don't have to worry about picking up a nasty.
 
I wrote a little batch file to fix and immunize my flash stick which I use on campus, since McAffee (which they use on campus) is one useless piece of software!

Download it here: Flash Fixer

Basically it removes all of the potential viruses I've encountered on my flash stick and then (as stated above) creates hidden/readonly/system folders in their places.
It'll remove the RESTORE folder as well as take care of the autorun.ini file incl many more.

You can use it from the root of a flash drive or even in the root of a hard drive (at own risk though)
 
yeah. Malwarebytes cleans this off in a shot! Highly recommended!
 
Thanks for all the advice. Got rid of all the files, then formated windows to be safe. Im definitely gonna try out the apps mentioned above.
 
XecutioneR said:
Hi all.

Ive discovered that my pc has been infected with an autorun.inf virus that is appearing on all my HDDs. It usually leaves behind an autorun.inf and an exe file that has the computer username.

After removing the files from all drives and rebooting, they come back on some drives. These appear as hidden system files, and the HDD icon changes to a folder icon in explorer.

Im running AVG fully updated, but no virus is found.
Currently trying Avira, which finds the files and deletes them, but after rebooting, their back.

Ive tried googling this virus and found that most anti virus software have trouble with these files, and that it modifies some system files and boot files.

Anyone know how to get rid of these files and fix all the system and registry files?

Thanks
Click to expand...

Had the same problem. AVG didn`t work. I got Avast! and that fixed everything:)
 
This is not a nice one! I battled for about 3 hours to get rid of this virus. Maybe there's a fix or removal tool you can run, but about a year ago there was nothing - ask me! I had to follow this procedure:

http://renanorola.i.ph/blogs/renanorola/2008/01/16/autoruninf-attack/

This worked like a charm. Afterwards I found out that Nod32 blocks the autorun virus, but McAfee doesn't. Not at that stage. McAfee only released an update a month or two after I had the problem and only then started to pick up the autorun virus. Good luck!
 
My wife's PC got infected by this aswell today - a bugger to get off. Used a combination of regedit and BitDefender, in the end all trace was removed.

Just need to remove everything from her memory stick and then all is done...
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X