I was on the meeting, and suddenly all the attendees infected with a 3o.exe trojan. This was due to an USB Flashdisk. The trojan infected all automatically (and silently) by using the autorun.inf script. It executed all the trojan scripts without anyone realized it (until finally one of us realized).
I will not talk about how to remove the virus (it’s quite easy actually, just enter the safe mode, delete all the amvo.*, 3o.exe, autorun.inf, and some *.cmd file). But I will talk about how to disable the autorun.inf auto execute so we can prevent the virus or trojan to self install when we plug our USB.
Please be noted that this method is not the same with removing AutoPlay function.
Disabling AutoPlay function will not prevent your system to run the autofun.inf automatically. So if you are thinking that you can make your system safe by disabling the AutoPlay, then you have to think it twice! 🙂
I got the useful link from here.
Scott Dunn on the website suggests to use this simple script below. This will make Windows to ignore the autorun.inf file forever for all devices (so no more silent install or silently running application).
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]
@=”@SYS:DoesNotExist”
Just copy paste the script above to a text file and rename it to .reg file. Double click to run the script.
Or you can click here for the script file (zipped). Extract the unregautorun.zip and you will get unregautorun.reg. Double click on the unregautorun.reg and click “Yes”. Done!
The bad thing is… You will no longer receive pop-up menu to install by the default installer (a game or software CD most likely use this feature). You have to explore manually to your CD and click the necessary file (setup.exe or install.exe).
Robert Heine
February 27, 2009 17:07I also had a trojan-virus, who installed himself in “/resycled/boot.com” on every external Drive. Thanks for the .reg-file 🙂
And no thanks to microsoft to implement this autorun-“feature” without the option to disable it 🙁
gustOmO
April 23, 2009 19:30done ________
elliot
May 28, 2009 23:32hi, thanks for your reg files. I am looking for any solution to let windows forget the autorun.inf totally. as in, It don’t recognize even any double click trigger or right click menu trigger. not only autorun it self.
I am switching to mac anyway. but i still worry for my friends… who using ugly pc.
suddenly… voom… virus…