Free PC Support
PC Help Forums from the Experts at Technical-Assistance.co.uk
 
Google
 
Search The Web Search This Site
 RSS FeedRSS Feed   FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister   ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

How to remove autorun.inf virus?

 
Reply to topic    Free PC Support Forum Home -> Helproom
Author Message
purav82



Joined: 11 Nov 2009
Posts: 25

PostPosted: Tue Jun 21, 2011 5:20 pm    Post subject: How to remove autorun.inf virus? Reply with quote

I m using Windows XP SP3 OS. I m facing trouble with my pen drive. Whenever i insert it into my pc, my antivirus detects "autorun.inf" virus. But it cannot clean/delete it. I have also tried to Format my pen drive but it shows the message that some other application is running hence it cannot be formatted.

Please help me in this matter.
Back to top
View user's profile Send private message
JonS



Joined: 31 May 2010
Posts: 813
Location: Morecambe

PostPosted: Tue Jun 21, 2011 7:28 pm    Post subject: Reply with quote

unplug the pen drive
Scan the computer in turn IN SAFE MODE with
Hitman Pro http://www.surfright.nl/en
Smitfraudfix http://siri.geekstogo.com/SmitfraudFix.php
Combofix http://www.bleepingcomputer.com/combofix/how-to-use-combofix
Malwarebytes Antimalware http://www.malwarebytes.org/

remove / delete anything and everything it finds
reboot and install
Panda USB Vaccine http://www.pandasecurity.com/homeusers/downloads/usbvaccine/
Turn auto-vaccinate ON and then insert the pen drive, which should then get innoculated. Then scan again using Htman Pro, and Malwarebytes (including the pen drive in the scan)
Back to top
View user's profile Send private message Send e-mail Visit poster's website
purav82



Joined: 11 Nov 2009
Posts: 25

PostPosted: Wed Jun 22, 2011 6:09 pm    Post subject: Reply with quote

JonS wrote:
unplug the pen drive
Scan the computer in turn IN SAFE MODE with
Hitman Pro http://www.surfright.nl/en
Smitfraudfix http://siri.geekstogo.com/SmitfraudFix.php
Combofix http://www.bleepingcomputer.com/combofix/how-to-use-combofix
Malwarebytes Antimalware http://www.malwarebytes.org/

remove / delete anything and everything it finds
reboot and install
Panda USB Vaccine http://www.pandasecurity.com/homeusers/downloads/usbvaccine/
Turn auto-vaccinate ON and then insert the pen drive, which should then get innoculated. Then scan again using Htman Pro, and Malwarebytes (including the pen drive in the scan)


THANKS A LOT JONS..... Very Happy
It worked. But I would like to ask you a few more things related to this.
First, whether i have to scan using both the software i.e. Hitman Pro & Malwarebytes or any one of them. FYI i have scanned only using Hitman Pro.
Second, after my pen drive was vaccinated, I formatted it. After formatting it, again scanned it with my Eset Nod 32 AV 4. It showed me this "G:\AUTORUN.INF - error opening". Why is the virus still not getting deleted even after formatting the pen drive.

As mentioned earlier I use Eset Nod32 AV 4. So is it safe to use Hitman Pro, Panda USBVaccine & Malwarebytes all togather along with Eset Nod32 AV4?

Please reply...
Back to top
View user's profile Send private message
JonS



Joined: 31 May 2010
Posts: 813
Location: Morecambe

PostPosted: Wed Jun 22, 2011 8:25 pm    Post subject: Reply with quote

1) to be reasonably sure of cleaning the machine you should really run ALL the programs I listed
2) non are "live" resident programs so none will interfere with the Eset program
3) Is ESET now finding a virus on the pen drive? If all thats there is a autorun.inf file that can't be opened, and doesn't give a "postiive" when scanned then the Panda Vaccine program is working correctly. It works by placing a dummy autorun.inf file on the pen drive, so blocking the worm
Even after you reformat the pen drive, next time you plug it into the machine the Panda autovaccine routine should revaccinate it and restore the protection. Any other pen drive you plug in will also be vaccinated

So, hopefully eveything is OK
However you can't trust one piece of software alone: run those other scans, just in case
An afterwards, IF your machine is reasonably powerful, it would be worth also installing Threatfire. Thats a secondary AV program that checks for bad behaviour, rather than signature traces and should work OK alongside ESET
Back to top
View user's profile Send private message Send e-mail Visit poster's website
purav82



Joined: 11 Nov 2009
Posts: 25

PostPosted: Fri Jun 24, 2011 2:12 pm    Post subject: Reply with quote

JonS wrote:
1) to be reasonably sure of cleaning the machine you should really run ALL the programs I listed
2) non are "live" resident programs so none will interfere with the Eset program
3) Is ESET now finding a virus on the pen drive? If all thats there is a autorun.inf file that can't be opened, and doesn't give a "postiive" when scanned then the Panda Vaccine program is working correctly. It works by placing a dummy autorun.inf file on the pen drive, so blocking the worm
Even after you reformat the pen drive, next time you plug it into the machine the Panda autovaccine routine should revaccinate it and restore the protection. Any other pen drive you plug in will also be vaccinated

So, hopefully eveything is OK
However you can't trust one piece of software alone: run those other scans, just in case
An afterwards, IF your machine is reasonably powerful, it would be worth also installing Threatfire. Thats a secondary AV program that checks for bad behaviour, rather than signature traces and should work OK alongside ESET


THANKS A LOTTTTTTT JonS. Thanks 4 replying quickly 2 my questions. BTW now pc is working fine. KEEP UP THE GOOD WORK JONS Very Happy Very Happy Very Happy Very Happy Very Happy Very Happy Very Happy Very Happy Very Happy Very Happy
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Free PC Support Forum Home -> Helproom All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

 



Powered by phpBB © 2001, 2005 phpBB Group

2005 - 2018 All Rights Reserved www.technical-assistance.co.uk
Terms and Conditions