How to remove "autorun.inf" from USB Drive ?

Recent Update: Remove "Autorun.inf" and "Antivirus 2008" using ESET NOD32 Antivirus

Latest Worms spreads by creating a copy of itself and starts by autorun.inf files. It is essential to remove the malicious autorun.inf files not only from computers but also from USB Drive which is the source.

This "autorun.inf" is not able to see,edit or delete directly and "Cut/Copy/Paste" may not work . To view this file entries

1. Open the USB drive

2. On the folder address bar (path) type (if USB is E:\)


"E:\autorun.inf" < press enter>

3. To replace this file

A simple procedure to remove/replace this "autorun.inf" is

Create a text file named "autorun.inf" on the desktop, open that file and type "open", save and exit .



4. Now open the USB drive

5. Drag "autorun.inf" from desktop to USB drive ( Do not Copy Paste, Only Drag and Drop ).



6. Right Click "autorun.inf",Go to 'Security' tab ;click 'Advanced' button . Use 'Edit' option to edit each lines in "Permission Entries" and set "Deny" permission to all entries. This settings will prevent viruses from recreating 'autorun.inf'.



NB:*This method worked for me.

If this method is not working ...


1. Plugin the USB Drive
2. Restart your computer with a bootable Windows XP CD-ROM inside the CD-ROM drive.
3. When Windows Setup screen appears press "R" to go to Recovery Console.
4. Windows Recovery Console will detect your windows installation and will ask you to enter the your choice ( Installation No) , Press "1" .
5. Enter the administrator password, press Enter
6. "C:\" command prompt will come up.
7. Go to USB drive ,eg: E: .
Type the following commands .

Command 1
__________________________
attrib -hrs autorun.inf

Command 2
__________________________
edit autorun.inf

DOS Editor will open
__________________________
open=file.exe
shell\Open\Command=infectedfile.exe
shell\open\Default=1
shell\Explore\Command=infectedfile.exe
shell\Autoplay\command=infectedfile.exe

Note down the name of "exe" files mentioned on autorun.inf .

Exit DOS Editor .
Type the following commands
______________________________
attrib -shr file.exe

del file.exe

exit
______________________________
Remove XP CD and boot your system normally .