How to delete autorun.

inf: Then best thing is to boot into Safe Mode and then goto command prompt and change to that drive and type:
Code:

attrib -a -s -h -r autorun.inf *then*

Code:

del autorun.inf
Re: How to delete autorun.inf with command prompt

try this it will work erase aurorun.inf /f /a -r that will delete file from the disk without asking u

Re: How to delete autorun.inf with command prompt

Give following commands:

Code:

attrib -s -h -r autorun.inf del autorun.inf

Is your PC a victim of the Autorun.inf virus? How to Remove Autorun.inf completely explains the simple way of removing Autorun.inf virus by using Autorun.inf Eater software. Deleting autorun.inf is effective only if the computer you are using is clean otherwise the autorun.inf will simply bounce back.

Using CMD to Remove Autorun.inf Virus from the System & Removable Drives

Method One

Open command line (CMD) and write the following:

del /a:rhs [driveletter]:autorun.inf

Simply Replace [driveletter] with your drive. If the virus is on the D drive the commad will be

del /a:rhs D:autorun.inf

Restart the computer & Done.

Second Method
Genreally when you refresh the windows explorer view a bounded virus process recreates this file. This file is attached to many events of windows explorer including OPEN, REFRESH, etc. You must close opened explorer windows. 1. Open up a command prompt (i.e. cmd.exe) >> to load it go to Run, type cmd, enter. 2. Now to remove viruss attributes (in order to delete it type following line by line and execute them pressing enter. F: F:attrib -s -r -h *.* If there are any malicious EXE files those are now visible so if unnecessary delete them too. F:del autorun.inf

3. After finishing above, quickly remove the pendrive as soon as posible (just after executing del command). 4. Now your pen is without virus activation config. file. Now you can safely delete unnecessary EXE files on it.

Method Third

Download Flash_Disinfector.exe from here and save it to your desktop. Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear. The utility may ask you to insert your flash drive and/or other removable drives including your mobile phone. Please do so and allow the utility to clean up those drives as well. Wait until it has finished scanning and then exit the program. Reboot your computer when done.

Note: Flash_Disinfector will remove any autorun.inf files, create a hidden folder named autorun.inf in each partition and every USB drive plugged in when you ran it. Dont delete this folder. It will help protect your drives from future infection.

Read more: http://inforids.com/remove-autoruninf-virus-completly-from-system-flashdrives/#ixzz0zfbCFSLX

Is your PC a victim of the Autorun.inf virus and you are unable to get rid of it? Here you can find a special free utility that can solve your problem. This utility is easy to run & no additional knowledge is required for that. Recommended Reading:

Remove Autorun.inf virus Completly from System & Flash Drives using CMD

Autorun.inf virus actually spread mainly from portable media such as USB drives, Memory Cards etc. If you are a victim of this virus then you may experience following problems: [1] You cant enable Show Hidden Files and Folders [2] Task Manager will be disabled and you cant open it. [3] Autorun.inf can enable more viruses when portable devices are used. [4] Access to Registry Editor will be locked.

[5] It can open the drives in new window each time when you try to open them. When an infected device is infected with a malware and an autorun.inf file is dropped, the shell menu is normally modified to execute the malware whenever the unsuspecting user double-clicks the infected drive. Actually Autorun.inf changes few entries on the registry of your system, and you cant restore those manually as access to the Registry Editor already disabled by this virus.

So, its a real problem if you are affected with this virus. Normally, popular antivirus software often fails to detect and remove Autorun.inf completely. To get rid of this, you can try a nice FREE utility called AutorunEater. Its a very fast and easy to use tool and helps you to remove Autorun.inf and restore all registry changes. Autorun Eater will remove any suspicious autorun.inf files even before the user attempts to access the drive. Download AutorunEater(Free) One Important Point I would like to tell you that some antivirus and antispyware programs may show false positive behaviour which means they can flag Autorun Eater as being infected/malware, although the application is perfectly safe and does not pose a threat to your system. If you already have other antivirus or anti-malware installed then they can detect AutorunEater as virus, just ignore this. Also you can disable and exit all antivirus program installed on your system before running AutorunEater.

Read more: http://inforids.com/remove-autoruninf-virus-easily/#ixzz0zfc6beXZ CDs, DVDs & PenDrives containing viruses or malwares make use of the AutoRun feature in Windows to infect your computer as soon as they were loaded. AutoRun was introduced with Windows 95 so a CD or DVD that contained a file called autorun.inf would start up when it was loaded in the CD drive.

AutoPlay was added in Windows XP and is also in Windows Vista. AutoPlay brings up a dialog box when any removable media like CDs, external hard drives or USB memory sticks are attached to the computer. The dialog box gives the user a list of possible actions like open as a folder, cancel, autorun a file, and more. For the computer user who wants to avoid all possible means of having his or her computer infected the safest thing is to turn off autorun or autoplay. Go with the following simple steps to turn off Autorun in Windows: 1. Go to Start, Click Run & type gpedit.msc and click OK.

2. It will open the Windows Group Policy. Now in the Group Policy, Click Administrative Templates,

For Windows XP click on System For Windows Vista, click on System Components, then Autoplay Policies.

Then Double click on Turn Off Autoplay.

3. Now In the Autorun Properties just popped, select Enabled & then select All Drives in the drop down.

Thats it. Now your windows is safe from unexpected viruses & malwares that infect the windows services using the Autorun feature.

Read more: http://inforids.com/turn-off-autoplay-feature-in-windows-without-anytool/#ixzz0zfclFJ6R

How to completely remove Autorun.inf virus from PC?

Posted on July 21, 2009, 8:29 PM, by Ankit. 0diggsdigg

Hello there! If you are new here, you might want to subscribe to the RSS feed for updates on this topic. Share

These days most of the computers are getting effected by Autorun.inf (it is a simple text-based configuration file that tells the operating system which

executable to start, which icon to use, and which additional menu commands to make available) virus, these viruses set its file attributes to System+Hidden+Read-Only attributes so some anti-viruses will have a hard time detecting or finding them. If your computer is also a victim of Autorun.inf virus and you are unable to remove/delete it, then I have a solution for you!, just follow these simple steps to remove Autorun.inf virus :

Open CMD and paste this code del /a:rhs [driveletter]: autorun.inf Now replace [driveletter] with your drive. Restart the computer & your Done!

Credit : Inforids

Related Posts:
If there are no longer signs of malware then please.... Create a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been saved in System Restore. Since this is a protected directory your tools cannot access to delete these files, they sometimes can reinfect your system if you accidentally use an old restore point. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state. The easiest and safest way to do this is:

Go to Start > Programs > Accessories > System Tools and click "System Restore". Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name, then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore. Then use Disk Cleanup to remove all but the most recently created Restore Point. Go to Start > Run and type: Cleanmgr Click "Ok" Disk Cleanup will scan your files for several minutes, then open. Click the "More Options" Tab. Click the "Clean up" button under System Restore. Click Ok. You will be prompted with "Are you sure you want to delete all but the most recent restore point?" Click Yes, then click Ok. Click Yes again when prompted with "Are you sure you want to perform these actions?" Disk Cleanup will remove the files and close automatically.

Vista Users can refer to these links: Create a New Restore Point and Disk Cleanup.

HOW TO REMOVE AUTORUN.INF VIRUS

My gateway laptop has Windows XP Pro installed in it and I am doing some projects. I usually use up most of the memory resources on my gadget by launching too many applications at the same time; which is not recommended. When one of them fails & hangs, I simply press CTRL + ALT + DEL for the task manager window and end the application, or the .exe file under processes tab. It is frustrating when you cannot launch the task manager and it says "Task Manager has been restricted by an administrator". This means my windows registry has been tampered with by malicious viruses.

What I do next is launch the registry editor by typing "regedit" (without the quotation marks) and pressing the enter key to open it and manually disable the entries prohibiting the launchcing of the task manager. Another way is by starting it through typing at RUN the executable"cmd" or opening the start menu>programs>accessories>command prompt and type "regedit"; but the editor window only opens up for about 10 miliseconds. It is present, however cant be launched. Your system will restart everytime you launch the command prompt in either way. Updating my mcafee ver 8.5i with its latest virus definitions and scanning my computer solves the problem, but wait! Were not done yet. Autorun.inf manually still has to be deleted manually. There are several viruses that use autorun.inf to spread themselves; such as the Bacalid, which hides itself in ctfmon.exe, and the RavMon.EXE. These viruses set their file attributes to System+Hidden+Read-Only. These attributes make it hard for some anti-viruses programs to detecti them. These viruses save themselves in the root directory of every available drive of the infected computer and run themselves every time you open the drive. Both USB Sticks and CDs are infected by the virus that runs automatically, especially if drive autorun is enabled for the current drives, which is usually by default.

Autorun.INF is typically used by CD Installers to autoplay their installations, but Hard disks by default should not have AUTORUN.INF in the drive.

When I am finished updating my anti virus software and scanning the hard drive, I try to display the content of my computer by way of command prompt in my root directory C:\ using the dir /ah command. The following information should then be displayed:

You can see from this window that drive C contains a hidden file autorun.inf, this is a possibility that the computer is infected. To erase this, restart your windows into Safe Mode with Command Prompt. This is done by rebooting your computer and pressing F8 before windows goes out and select from the advanced options menu. On drive C and all other root directories type the following commands: 1. attrib -h -r -s autorun.inf 2. del autorun.inf Repeat these steps for all of the other drives roots directories to disable autorun.inf .

Disable AUTORUN from Registry

Now you are able to disable the AUTORUN for all drives by configuring the registry. Open the registry by typing regedit.exe to the command prompt (if your still at the command prompt) or execute it in Run and type regedit and press enter. Look for the HKEY_CURRENT_USER\Software\ Microsoft\Windows\CurrentVersion\Policies\Explorer as shown below:

Double-click the NoDriveAutorun DWORD entry and type the value HEX: FF (255 in Decimal). If the NoDriveAutorun does not exists, you can create it by right-clicking the right side area of the regedit window, then click New->DWord Value -> type NoDriveAutorun. Close the registry and restart the computer. This procedure will disable all the autorun for all drives of your computer and should prevent the autorun function of infected USB drives or CDs and avoid the infection of viruses like the Bacalid and RavMon.exe./Ravmone.exe. I do hope this helps you in some way. Enjoy!

Thanks to my friend bleuken for sharing his ideas.