Monday, December 15, 2008

Deleting Malware-created AUTORUN.INF/s

Right-click Start then click Search... or Find..., depending on the version of Windows you are running.
In the Named input box, type:AUTORUN.INF
In the Look In drop-down list, select a drive, then press Enter.
Select the file, then open using Notepad.
Check if the following lines are present in the file:[autorun]open=wscript.exe system32.dll.vbsAction=Open Removable Driveicon=%windir%\system32\shell32.dll,8shell\explore\command=wscript.exe system32.dll.vbsshell\explore=Exploreshell\open\command=wscript.exe system32.dll.vbsshell\open=Open
If the lines are present, delete the file.
Repeat steps 3 to 6 for AUTORUN.INF files in the remaining removable drives.
Close Search Results.

No comments: