How To Remove Autorun Virus
From YaHowTo
Contents |
What is “autorun.inf” Virus
Autorun virus called Generic!atr VBS_RESULOWS.A or VBS.Zodgila in the antivirus!
You do not understand why the virus can get into your machine, though the antivirus installed very carefully. So they spread and how to prevent? They simply create autorun.inf file, and you will activate the damage this virus when no defense.
When you encounter this type of virus, we can not distribute the whole system until you run the autorun.inf file. Inside the autorun.inf file will have a path of actual virus. When you open partition drive from My Computer (click double) autorun.inf file contains the means you have to activate the virus in it. The anti-virus software can help you easily find out this virus. However, overcoming the consequences that it causes is not easy.
How Autorun Virus work
Virus entry into the system from the network and USB. It often creates a file autorun.inf in the root directory of the USB or floppy. When the available storage devices are plugged into (USB, CD, floppy disk ...), check Windows autorun.inf file and automatically execute the command line structure is arranged in advance.
Autorun.inf files often content:
[autorun]
open=virus.exe
icon=diskicon.ico
File virus.exe be activated and set by the drive icon is diskicon.ico. These files are located in the root directory of storage devices.
When the infected system the virus creates a file: autorun.inf and MS32DLL.dll.vbs at:
[DRIVE LETTER]:\MS32DLL.dll.vbs
[DRIVE LETTER]:\autorun.inf
Signs system infected virus
1. Do not open the partition the hard drive by double click
2. CPU use is always 100%, the system often suspended
How To Prevent Autorun Virus
To disable the automatic autorun:
1. Using regedit
- Start - Run, type regedit and press Ok
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
- Double click into NoDriveTypeAutoRun and fix the FF to disable autorun for all drives. Disable regedit and reboot the system
2. Using Group Policy
Start Menu - Run then type: gpedit.msc \ Administrative Templates \ System
For CD-ROM only, select your CD-ROM drivers, if they choose to turn off the All Drives in the Turn off
How To Remove Autorun Virus
1. Use the antivirus or sercurity program, software Autorun remover is used quite effectively.
- You can download for free at:http://www.softpedia.com/get/Security/Secure-cleaning/Autorun-Eater.shtml
2. If detected in the virus have USB you type cmd and type the following command to remove (in order):
- attrib -s -h [driver letter:\]autorun.inf (remove hidden attribute of autorun.inf)
- del [driver letter:\]autorun.inf (remove autorun.inf)
- If you only use the del will not detect autorun.inf and order will not be implemented
3. You should not double click on the hard drive partition
- Mycomputer /Tool / Forder option / View
- In the Hidden files and folders select Show hidden files and folders.
- Uncheck options in the two
- Hide extensions for known file types
- Hide protected operating system files (recommended)
Open the hard drive partition delete all files hidden and autorun.inf file (use right click or windows explore). Reboot system
