USB Autorun - How to remove it

Nowadays, trojan and worm virus is an headache of every computer users that it seems uncontrollable even your anti-virus software is always updated. It seem so helpless specially for ordinary user of computer. The use of USB drives or what they call thumb drive is one of the major spreader of these virus in addition to Internet connection. But are you aware that the spread of this called bugs or virus can be prevented even you anti-virus is not so powerful? Here is how:
First thing first, we need to DISABLE the autorun of any removable device such as USB Drive, Memory Card Reader, CD-Rom etc to our computer, do you know how to do it? If not just go to My Computer, if you see the cd-rom drive there or the USB Drive just right click your mouse, then click Properties, then AutoPlay tab , on the drop down menu click MIXED CONTENT and Click TAKE NO ACTION, then apply.

This first step is necessary so that you'll avoid to be infected by virus that is embeded on Autorun scripts.
Just in case you are already infected of an "autorun" virus, there is posibility that your registry is already modified, you cannot run regedit, you cannot show hidden files then you are in trouble :), well we can still do something about that:

While the computer is still off;
Plugin the USB Drive
Insert the Windows XP CD-ROM into the CD-ROM drive. It must be the bootable Windows XP Installer
Start the computer from the CD-ROM drive. It will start Windows Setup screen
When the “Welcome to Setup” prompt appears.Press “R” to start the Recovery Console
If asked “Which Window installation would you like to logon to” select the number. type “1? then Enter, if only one installation of Windows is present
Enter the administrator password, press Enter
It will bring you to command prompt, C:\Windows>
Proceed with the following command:
- Type d: (This is the drive letter of USB. It can be e: or f: defending on how many hard disk or cd drive is installed)
- Type attrib -h -r -s autorun.inf
- Type “edit autorun.inf” it will open DOS Editor and display contents as follows
==========================
[autorun]
open=file.exe
shell\Open\Command=file.exe
shell\open\Default=1
shell\Explore\Command=file.exe
shell\Autoplay\command=file.exe
==========================
Take note on the file that it called to open (in above example it is file.exe)
Exit DOS Editor and return to command prompt, D:\>
Delete the file that was called to open on DOS Editor
- Type del /f /a file.exe
Delete autorun.inf file
- Type del /f /a autorun.inf
Exit Recovery Console by typing exit.

I hope it will help to all guys there that having trouble with this problem. If you still having problem following my instruction just leave a comment here, I'll be happy to help.

Related Posts by Categories