AUTORUN VIRUS, AS THE NAME SUGGESTS IT USES THE AUTORUN.INF FEATURE IN THE WINDOWS OS THAT IS USED FOR LAUNCHING THE PROGRAMS THAT ARE STORED IN THE REMOVABLE MEDIA SUCH AS DVDS, USB DEVICES, CD ROMS, AS WELL AS MEMORY STICKS.
In the event that THERE IS AUTORUN.INF VIRUS IN USB DRIVE, EACH TIME YOU INSERT THE REMOVABLE MEDIA AND DOUBLE-CLICK YOUR DRIVES TO OPEN IT, VIRUS FILES BEGIN EXECUTING AND INFECT YOUR COMPUTER: WHICH SPREADS ITSELF ONTO THE COMPUTER BY MAKING THE MULTIPLE COPIES OF THE AUTORUN.INF AND .EXE FILES ON EVERY DRIVE OF YOUR COMPUTER.
The following IS A GUIDE TO DELETE THE AUTORUN.INF VIRUS MANUALLY, MANUAL REMOVAL OF THE AUTORUN.INF VIRUS IS SUGGESTED JUST TO COMPUTER EXPERTS AS REMOVING AND EDITING THE WINDOWS REGISTRY MAY CAUSE YOU SEVERE DAMAGE TO THE SYSTEM.
Remove autorun.inf virus on USB drive
Connect THE USB DRIVE To YOUR COMPUTER, A WINDOW Dialog MAY APPEAR, DON'T CLICK ON OK , JUST CHOOSE 'Scratch off'.GO TO COMMAND PROMPT AND TYPE YOUR USB DRIVE LETTER.
Sort DIR/W/An AND PRESS ENTER, THIS WILL DISPLAY A LIST OF THE FILES IN YOUR FLASH DRIVE. Evacuate THE FILES: RAVMON.EXE, NTDELECT.COM, NEW FOLDER.EXE, KAVO.EXE SVCHOST.EXE, AUTORUN.INF IF YOU FIND THEM.
TO DELETE THE VIRUS JUST TYPE DEL AND THE FILENAME EXAMPLE. F:\DEL AUTORUN.INF AND HIT ENTER.
RUN An ANTIVIRUS SCAN ON YOUR USB DRIVES JUST TO MAKE SURE THAT ALL THREATS ARE REMOVED SUCCESSFULLY
Erase AUTORUN.INF ON HARD DRIVE OF COMPUTER
BOOT YOUR SYSTEM IN THE SAFE MODE AND THEN OPEN A COMMAND PROMPT.
Erase THE FOLLOWING FILES:
%SYSTEM%\CONFIG\CSRSS.EXE
%WINDIR%\MEDIA\ARONA.EXE
%SYSTEM%\LOGON.BAT
%SYSTEM%\CONFIG\AUTORUN.INF
C:\AUTORUN.INF
D:\AUTORUN.INF
E:\ AUTORUN.INF
F:\AUTORUN.INF
AUTORUN.INF FILES IN ALL DRIVES.
OPEN THE REGISTRY EDITOR AND DELETE FOLLOWING PARAMETERS:
[HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM]
DISABLETASKMGR = 1
[HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER]
NOFOLDEROPTIONS = 1
[HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE]
"WORMS" = "%SYSTEM%\LOGON.BAT"
REBOOT YOUR COMPUTER
THE METHOD FOR REMOVING AUTORUN VIRUS ABOVE IS USEFUL FOR SOME TYPES OF SIMPLE AUTORUN VIRUSES. On the off chance that THE AUTORUN.INF COME BACK AGAIN AFTER REMOVAL AND REINSTALL ITSELF ONTO FLASH DRIVE OR LOCAL DRIVE, EVEN THE ANTIVIRUS COULD NOT DETECT IT, THAT MEANS THE YOU HAVE INFECTED A NEW VARIANT VIRUS, WHICH IS UNABLE TO BE REMOVED MANUALLY.
IN THIS CASE, YOU NEED TO USE THE EFFECTIVE AUTORUN REMOVAL TOOL.
No comments:
Post a Comment