1.Symptoms of infection:
Hard disk autoplay
msconfig disabled
Hidden files and folders disabled .
2.W32/Autorun Worm:
CleanAutoRun.exe will detect and remove the W32/Autorun Worm and its variants completely from your system. Download cleanautorun.exe and save it on your desktop. Double click on CleanAutoRun.exe to execute it. Follow the user-friendly instructions to detect and remove the W32/Autorun Worm and its variants from your computer. This way, you can make sure that your computer and the data it contains are safe.
W32/Autorun Worm Virus Removal Tool Download.
3.Autorun Virus Removal method 1:
The autorun virus can be removed both manually and by using any autorun virus removal tool. The manual removal time of the virus depends on the intensity of the attachment of the virus to the system. To remove the virus manually, you need to:
1. Kill the autorun process through Task Manager.
2. Boot the system in safe mode and open the command prompt.
3. List all system and .exe files on the C drive (or your OS drive).
4. Disable hidden, system, and read only attributes for autorun.inf and ntdelect.com (not ntdetect.com)
5. Delete both the files.
6. Repeat these steps for all the drives on your computer.
7. Search for kavo.exe in C:\windows\system32\ and delete it.
8. Open registry editor and delete all the entries of kavo.exe under:
HKEY_LOCAL_MACHINE\SOFTWARE
HKEY_CURRENT_USER\SOFTWARE
4.Remove Autorun Virus in Minutes
The manual removal of autorun virus is recommended only to computer experts because removing or editing windows registry can cause severe damage to your system if you delete the wrong files. Therefore, it is always better to use autorun removal tool to remove the virus from your computer.
Want to squash those annoying pop up ads and get your PC running like new? Come get your free scan at Spyware Fix today!
Jim Marshall is an expert computer technician with fifteen years of experience in the industry. Since his own computer was destroyed by malicious software, he has been studying anti-spyware, adware, and malware systems for years. His website details the comprehensive results of this research, ranking the best anti spyware programs available.
http://www.spyware-fix.net/index.html
Autorun Virus Removal method 2:
1.Get autorun virus removal tool here
2.Now Press Win+R and enter cmd open Windows command prompt .
Now we are about to list hard disk files from command prompt .
for C drive type dir c:\ /a/w

If Autorun virus is present , It will get listed as shown above . There would be many other files like onlinegames , kavo.exe,.vbs , Heap41a , newfolder.exe,.com, ppt.exe etc .
These files include read only, archive, system and hidden file attributes associated with them.
So in next step we will remove these restrictions from the above suspicious files .
attrib -s -h -r c:\autorun.inf
or attrib -s -h -r c:\autorun.vbs ( Change the hard disk partitions as required)
Now remove all those files associated with autorun virus using del instruction .
Del autorun.inf or Del kavo.exe ( repeat the procedure for all the files and hard drives )
Or you can automate the process by notepad
dir c:\ /a/w
attrib -s -h -r c:\autorun.inf
del autorun.inf
dir d:\ /a/w
attrib -s -h -r d:\autorun.inf
del autorun.inf
dir e:\ /a/w
attrib -s -h -r d:\autorun.inf
del autorun.inf
(Add the necessary hard disk partitions and files as per requirement ). Now copy the completed document in notepad and save as remove.bat . This file will remove all the autorun virus traces on execution .
After removing all the infected autorun virus files from hard drives , execute autorun virus removal tool on step 1 to remove further traces .
3. Repair registry to enable hidden files and folders .
Press Win+R and enter regedit . Now this will open the Windows registry . Move on to the following registration entries .

HKEY_LOCAL_MACHINE >SOFTWARE>Microsoft>Windows>CurrentVersion>Explorer>Advanced>Folder>Hidden>SHOWALL
Autorun virus usually alter this registration entry . Double click on CheckedValue and enter value data as 1 . Now you would be able to enable hidden files and folders .
4. Turn off autorun feature in Windows .
This will avoid the execution of existing autorun worms in a PC and also one on USBs and CDs .
Copy the following command in notepad and save as removeautorun.reg
REGEDIT5
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]
@=”@SYS:DoesNotExist”
5. Restart your PC for the complete removal of Autorun virus .
Now almost all antivirus softwares like Kaspersky , Norton , NOD32 will remove autorun virus species. So keep your antivirus updated .
Posted in Uncategorized
