Auto run virus

Use the following command to delete it in command prompt del /a /f autorun.inf It said that it could not find autorun.inf is because you didnot use the attributes A & F i.e. /a /f

If I get any sort of malware that my regular screeners can't or don't handle I go to the web. I do a search on the virus name. So far I have found some dedicated software that will attack the particular problem. You should also know that so far I have been 100% successful using this method. Additionally, all the software I have used so far has been free. I think 100% success at no cost is a fair reason to at least look into the process. Its better to avoid that virus by disabling the autorun by following the few steps. 1.Go to Start->run and enter gpedit.msc A window will open 2.Select 'user configuration' from left side of window. 3.select 'Administrator template' and select 'system' and made a click on that. 4.In the right side search for 'Turn off Autoplay' 5.Double click on that, a window will open. 6.In the window select the 'enable' check box. 7.Below the check box a option is available from that select 'All drives' 8.Finally give apply and ok. Thats all, now u can prevent from autorun virus Ask me what ur question i'll try to answer it Comment on this answer if u feel it is useful. This file virus is a Windows PE EXE file. The file is 380 416 bytes in size. It is written in Delphi. Installation When launched, the virus copies its executable file as follows: %System%\config\csrss.exe %WinDir%\media\arona.exe It also creates the following file: %System%\logon.bat When this file is run, it will launch a copy of the virus: %System%\config\csrss.exe In order to ensure that the virus is launched automatically when the system is rebooted, it adds a link to its executable file to the system registry: [HKLM\SOFTWARE\Microsoft\Windows\Curre "Worms" = "%System%\logon.bat" The virus also creates the following files: %System%\config\autorun.inf h:\autorun.inf f:\autorun.inf i:\autorun.inf g:\autorun.inf k:\autorun.inf l:\autorun.inf o:\autorun.inf j:\autorun.inf

These files will be launched each time the user opens the corresponding hard disk partition using Windows Explorer. When one of these files is run, it will launch a copy of the virus: %System%\config\csrss.exe. Payload The virus modifies values of the following system registry keys: [HKCU\Software\Microsoft\Windows\Curre DisableTaskMgr = 1 [HKCU\Software\Microsoft\Windows\Curre NoFolderOptions = 1 It also searches the hard disk partitions listed below for files with an ".mp3" extension: d:\ c:\ e:\ f:\ g:\ h:\ These files wil then be deleted. Removal instructions If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program: Use Task Manager to terminate the virus process. Delete the original virus file (the location will depend on how the program originally penetrated the victim machine). Delete the following parameters from the system registry (see What is a system registry and how do I use it for details on how to edit the registry): [HKCU\Software\Microsoft\Windows\Curre DisableTaskMgr = 1 [HKCU\Software\Microsoft\Windows\Curre NoFolderOptions = 1 [HKLM\SOFTWARE\Microsoft\Windows\Curre "Worms" = "%System%\logon.bat" Delete the following files: %System%\config\csrss.exe %WinDir%\media\arona.exe %System%\logon.bat %System%\config\autorun.inf h:\autorun.inf f:\autorun.inf i:\autorun.inf g:\autorun.inf k:\autorun.inf l:\autorun.inf o:\autorun.inf j:\autorun.inf Update your antivirus databases and perform a full scan of the computer or email me at furti_96@yahoo.com and i will send you a strong antivirus 2009 to remove the threat/s or manually go you to avast,avira or avg site all of they 3 antiviruses are FREE! and now when you finished install Norton Internet Security 2010 free trial and see for yourself

the diferrence!or try one of the best FREE antivirus: 1.avast-http://www.avast.com/ 2.avira-http://www.avira.com 3.avg-http://avg.com Plug pen drive to your computer, dont open your pen drive yet......, Open command prompt. To open command prompt go to start then run and then type cmd now in c you ommand prompt type your removable disk drive name. exe: or g: Now type attrib then you see your autorun.inf now type attrib autorun.inf-h-s-r and then del autorun.inf then the autorun.inf will be deleted........

How To Remove Autorun Virus 1. Use the antivirus or sercurity program, software Autorun remover is used quite effectively. * You can download for free at:http://www.softpedia.com/get/Security/Securecleaning/Autorun-Eater.shtml 2. If detected in the virus have USB you type cmd and type the following command to remove (in order): * attrib -s -h [driver letter:\]autorun.inf (remove hidden attribute of autorun.inf) * del [driver letter:\]autorun.inf (remove autorun.inf) * If you only use the del will not detect autorun.inf and order will not be implemented 3. You should not double click on the hard drive partition * Mycomputer /Tool / Forder option / View * In the Hidden files and folders select Show hidden files and folders. * Uncheck options in the two * Hide extensions for known file types * Hide protected operating system files (recommended) Open the hard drive partition delete all files hidden and autorun.inf file (use right click or windows explore). Reboot system More Detail: http://www.yahowto.com/How_To_Remove_Autorun_Virus One of the first things to do when you suspect malware is DISABLE System Restore. If enabled, this allows malware to hide in the computer and re-install itself. So, to disable it, RIGHT-click on "My Computer." Select "Properties" then under the 'System Restore' tab, check 'Turn off system restore' IF not already checked. The next most helpful things that would help you are to use ONLINE scanners from websites to removeanymalware onyourPC. The current best online scanners I prefer are from Kaspersky antivirus and Bitdefender antivirus. Together, these 2 scanners will find ALL the bad stuff on your PC because they have the BEST detection rate. First, use Kaspersky's. (FYI: ALL these scans require you to agree to a EULA and install an activex control which is needed to perform the scan, so agree to them all.) *NOTE: Some scanners ONLY work with IE or may not fully remove malware Then scan with: One of the first things to do when you suspect malware is DISABLE System Restore.

If enabled, this allows malware to hide in the computer and re-install itself. So, to disable it, RIGHT-click on "My Computer." Select "Properties" then under the 'System Restore' tab, check 'Turn off system restore' IF not already checked. The next most helpful things that would help you are to use ONLINE scanners from websites to remove any malware on your PC. The current best online scanners I prefer are from Kaspersky antivirus and Bitdefender antivirus. Together, these 2 scanners will find ALL the bad stuff on your PC because they have the BEST detection rate. First, use Kaspersky's. (FYI: ALL these scans require you to agree to a EULA and install an activex control which is needed to perform the scan, so agree to them all.) *NOTE: Some scanners ONLY work with IE or may not fully remove malware Then scan with: http://www.bitdefender.com/scan8/ie.html

Many Viruses infect and harm the system with the use of malicious autorun files. This post is from the series of solutions we have prepared in order to protect windows from autorun.inf viruses which normally spread through pen drives or cds and other portable devices. We are getting lots of computer problems from readers in which users report the following issues: 1. Cannot open hard disk drives by double click. 2. Double clicking on any drive opens search. 3. Error message being displayed while trying to open drives. 4. Double clicking on any drive opens Open With dialog window. 5. [...] The USB flash drive or pen drive are very useful portable storage devices which are very commonly used for transferring or transporting personal data
or work files from one station to another, e.g. from the house to the office or for carrying around data that users intend to transfer or access in a variety of places. The USB flash drive is compact and easy to carry around. However, as the storage device is so common and easily used, the percentage of the drive being infected by viruses has also increased substantially. In this situation, what can a user do in order to prevent or reduce the risk of being infected by viruses while transporting data via the portable USB drive? To minimize the risk of the PC being infected by viruses, it is a good practice to keep a habit to carry out the following measures once you insert or connect your portable Pen Drive into your computer. When you insert your USB Drive or Pen Drive into your PC, click cancel to close the dialogue box prompted out.

Now you need to go to Start\Run and type cmd to run the Command Prompt Window as shown below.

In the Command Window, type in your flash drives drive letter (if your pen drive is detected as G, then type G: and so on). Once you have gone in to your pen drive, now type dir/w/o/a/p and hit Enter. You will then see a list of files. Search whether any of these files appear or exist: 1. Autorun.inf 2. New Folder.exe 3. Bha.vbs 4. Iexplore.vbs 5. Info.exe 6. New_Folder.exe 7. Ravmon.exe 8. RVHost.exe or any other files with .exe extension. For instance, two files are found in the following example: a.dll.vbs and Autorun.inf.

If you happen to see any of the above files, just type and run the command attrib -h -r -s -a *.* as shown in the photo below:

Once this has been done, you need to delete the files that you see. In the example above, you need to delete the a.dll.vbs and Autorun.inf. Just type in del autorun.inf and del a.dll.vbs. Once this has been done, you need to delete the files that you see. In the example above, you need to delete the a.dll.vbs and Autorun.inf. Just type in del autorun.inf and del a.dll.vbs.

Its almost done. To double ensure your pen drive is safe, perhaps you might need to scan your USB flash drive
again with some reputable antivirus software. You can eject your pen drive and reinsert for using.