Wednesday, July 28, 2010

Remove the Autorun.inf virus from pendrives!!

this is a much simple way to remove the Autorun.inf file. Generally when you refresh the windows explorer view a bounded virus process recreates this files. This file is attached to many events of windows explorer including OPEN,REFRESH,etc. Simple step to remove the virus activation.:0---

1. Open up a command prompt
2. Now to remove virus's attributes (in order to delete it type for llowing line by line and execute them pressing enter.


F:\
f:\attrib -s -r -h*.* if there are any malicious EXE files those are now visible so if unnecessary delete them too.



and second mathod


type dir /w/a and press enter for eg. f:\dir /w/a <-- then press enter

this will display a list of the files in your flas drive. check if the following file present on your USB ddevice.

*Autorun.inf
*Ravmon.exe
*new folder.exe
*svchost.exe
Heap41a
*or any other EXE file that you find suspicious.
if you spotted any of the above fies,then most probably your drive is infected.

To remove the virus....

type in your command promt "attrib -r -a -s -h *.* and press enter. This will remove the Read Only,Archive,System and hidden file attribute from all the files.

To delete the virus just type del and the filename. eg. F:\ del virus.exe
Remove the USB drive and plug it again. in most cases, the real culprit is
"Autorun.inf" file which gets executed when someone clicks ok in the dialog window which appears above. Thus the infection can spread.









f:\del autorun.inf

3.After finishing above, quickly remove the pen as soon as possible(just after executing del command).


Now, your pen is without virus activation config. now you can safely delete unnecessary exe file on it.

No comments:

Popular Posts