Posts tagged ‘how to remove autorun.inf virus’

how to remove autorun.inf virus

Autorun.INF is usually used by CD Installers to autoplay their installations but Hard disks by default should not have AUTORUN.INF in the drive.

Now, it is possible that your computer is infected by those viruses if you try to display the content of the your computer through command prompt, using the dir /ah command. Y

The said virus hides itself inside a folder named Recycled. The folder has a hidden/system/read-only attribute, that’s why you can’t see it if you will use the Search window. When your system is infected by the said virus, it infects every drive connected to your PC by dropping VCAB.DLL to the internet temporary folder and creating the CTFMON.EXE to folder Recyled & AUTORUN.INF to the root directory of every drive. That’s why when you connect your USB sticks to the infected PC it will be infected immediately, the USB disks will be the new carrier for the virus. The program runs every time you start your computer because it copy itself in the Startup folder of the Start Menu. It also run every time your insert the infected USB disk and it triggers every time you Double-Click the infected drive (bcoz of the AUTORUN.INF). The virus infects .EXEs and .DLLs.

To check if your system is infected by the said virus without using an antivirus, do the following steps:

  1. Go to command prompt.
  2. Type CD\ in drive C to go the root directory
  3. Type DIR /AH and press ENTER key. This will display all hidden files in your drive C
  4. If you see a file AUTORUN.INF and a folder Recycled, then your system is infected.
  5. Try doing this to your USB drive and check if your USB stick contains the same folder and AUTORUN.INF, if it does then your system is really infected. (more…)

February 15, 2008 at 10:54 pm Leave a comment


Recent Posts

Recent Comments

Mr WordPress on Hello world!

Follow

Get every new post delivered to your Inbox.