How do i get rid of autorun.inf virus?

I used USB flash disinfector on my PC and it seems that the virus is still there. I plugged in my psp/external Hard drives and it infected them even though i have used it. Can anyone tell me how to get rid of it? Now my external Hard disks are opening a new window whenever i double click them but previously, they open in the same window i opened my computer.

 

AVG8 will find it instantly, remove the worm and replug the USB drive. Ive seen this USB worm too many times..

or you can format the drive. You will still need to find the source of the infection or it will keep occuring.

 

Is this a virus?

It seems to be seen in every of my external HDD i plugged in, including the root directory of C.

[AutoRun]
;fKdjK00
open=imo.exe
;s6cKDaAsoalL2aal14CwSpZdZdwq09slesAsL1Ssk242opwwmfAwa
shell\open\Command=imo.exe

Avast in my other pc picked it up as imo.exe as a threat.

 

You will have to run a couple of antimalware programs to make sure you got rid of this malware.
Check out SAS, MBAM and DrWeb CureIt. Download links are in my sig.
Cheers.

 

Btw will they interfere with AVG?

 

Hi btw, this is what AVG picked up relating to the autorun.inf virus. My other pc picked up imo.exe with avast.

 

I got rid of this pest with Avira.

When you plug the Flash Drive in it will detect the "Virus". If I remember correctly, Avira will tick "deny access" in the options given.

Untick "deny access" and tick "delete". You will not loose any data. Just gets rid of the pest.

And if the warning pops up again and again do the same. Delete. This thing hides everywhere. Always just choose "delete".

It will eventually die. And your annoying problem will be gone.

Cheers,
Theo

 

hmms, same problem as me? imo.exe infecting autorun.inf?

 

Are you still having problems with 'imo.exe'?
Make sure that your DNS settings are ok so that security programs can be updated before using them.
OpenDNS is worth checking.
Did you post a question on the KAV forum yesterday under Ev0d3vil, if so, the reported trojan must be eliminated also.
Cheers.

P.S. the programs I suggested in my previous post won't interfere with your AV.

 

And that is only the preliminary scan by Avira.

It has not even really scanned your comp yet.

Suggestion:

1. Let Avira pick up the "Virus" when you plug the flashstick in.
2. Everytime the warning comes up..."click delete"...instead of "deny access"
3. Once the flash is supposedly cleared....remove it.
4. Scan your computer with totally up to date Avira. There are going to be plenty stops where Avira is finding stuff....always choose "delete".
5. Once Avira has supposedly found everything.....start again. Scan my computer. More trash will be found. Always choose "delete".
6.Restart the computer.
7.Make sure all is well.
8.Plug in the flash stick. Tell AVIRA to scan the flash stick. Again.
9.Your problems should be gone. No Autorun. And no more problems.

And all your data is still there. Where it belongs. Virus is history.

Cheers,
Theo

 

well yeap. But the trojan is still there even after i followed those steps.

 

Is there a way to not let the virus infest itself in my thumb drive everytime I plug my drive in public computers?

I can easily delete it with Avira AntiVir, but it still is annoying. If I didn't scan it first in my computer and plug it into other's computer, they usually blame me for having a thumb drive with this worm.

 

You mean that SAS, MBAM and DrWeb CureIt couldn't remove the trojan?
Or do you mean that you've followed the steps, advised on the KAV forum, and the trojan is still there?
Btw, Smitfraudfix is also an excellent program/tool to remove malware. Give it a try.
Cheers.

 

No. I have disinfected multiple computers and drives with this pest.

As soon as you plug a "worm or virus free" flash stick into an infected computer.....it automatically loads the autorun onto the flash stick again.

And you are back to square one. Again.

The only way is to ensure you don't plug your clean flash stick into a infected comp. And the only way that happens is if you have personally supervised, controlled, monitored the host computer. And we all know that is friggin impossible....

So, we have to live with this pest for now.

As I have said so many times....Avira is brilliant at picking up this trash but you have to think for it. Always "delete" and never "deny access". It will eventually kill this POS.

Cheers,
Theo

 

also norton has a tool for this specific virus...

 

this sucks man. I have been hit by a recycler autorun.inf virus ? I dont even remember doing anything to get hit by it. Never plugged in any flash drives whatsoever.