The solution to prevent AUTORUN.INF virus on usb drive by uncle chan
First, make sure your computer able to run ‘cmd’ and show all hidden files.
If your computer ‘folder option’ had been disable by virus,
open notepad , paste the code below inside notepad,
Windows Registry Editor Version 5.00
;Fix Folder Options
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
“NoFolderOptions”=dword:0000000
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
“NoFolderOptions”=dword:0000000
[HKEY_USERS\S-1-5-21-507921405-2139871995-725345543-500
\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
“NoFolderOptions”=dword:00000000
after that ,
save as types: all files
file name : whatever.reg
double click the .reg file just now you saved and it will be done.
If you have antivirus software, scan virus everytime you plug in a removable disk.
Don’t double click or open the removable drive , it will active the virus imeadiately.
Your pc will safe as long as you not open it.
How to know your removable disk infected by virus ?
Here is some of Symptom
Unable to ‘ Safely Remove Hardware’.
Unable to open removable drive with double click.
Once double click it pop up ‘Open with’ let you choose which program to open with.
If you right click the removable drive , if you found that ‘Autorun’ is the first option , that mean your removable disk inside has a autorun.inf file.
Now let remove the virus manually, make sure you not open the removable disk before doing step below
goto start > run > cmd
type your removable disk letter (eg: f: , g: , e:)
type ‘dir/a’
this will list all files in your removable disk include hidden files and system files.
Ok, did you find some file named as:
autorun.inf
pagefile.pif
flash.10.setup.exe
scanner.exe
flash jokes.exe
these are virus exe files , this is just few of example of virus file, if you found that the file name extension is exe , small size (in KB) , and weird file name , then it should suspect as a virus file.
Now, type
attrib -r -a -s -h (virusfilename)
example
attrib -r -a -s -h autorun.inf
attrib -r -a -s -h pagefile.pif
this make the virus file visible.
after that , type
del (virusfilename)
example
del autorun.inf
del pagefile.pif
this is delete the virus files.
after you delete all the virus file , type dir/a again check whether all virus file was clear.
Now safely remove hardware and plug into your pc again.
go into your removable disk , double click or whatever you like.
Now create a FOLDER name it as ‘autorun.inf’ , reason is there can’t be same filename which file or folder in one folder.
That mean once your removable had a folder name is ‘autorun.inf’ , the actual virus autorun.inf can’t be create.
But if unable create ‘autorun.inf’ folder , that mean the actual autorun.inf still exist in your drive !
So you need to start over again delete it from CMD. Without actual autorun.inf , the virus file are useless unless you double click the virus files.
You can create ‘pagefile.pif’ folder too and other virus filename that you know.
This is one of the solution to clear removable disk virus manually.
