Saturday, August 16, 2008

Drives And Devices - The Autoplay Issue

In some situation especially when anti-virus program has cleaned, healed, disinfected or removed a worm, Trojan horse or virus from computer, there may be error happening whenever users try to open or access the drive by double clicking on the disk drive icon in Explorer or My Computer window to try to enter the drive’s folder. The problem or symptom happens in hard disk drive, portable hard disk drive or USB flash drive, and Windows will prompt a dialog box with the following message saying :


"Choose the program you want to use to open this file with"

The symptom occurs because when "autorun.vbs" is created by Trojan horse or virus. The virus normally loads "autorun.inf" file to root folder of all hard drive or USB drive, and then execute "autorun.bat" file which contains script to apply and merge "autorun.reg" into the registry, with possible change to the one of the registry key to ensure that virus is loaded when system starts.




Now, to correct this agitated havoc what you have to do is type the following command consecutively by hitting Enter key:

del c:\autorun.* /f /s /q /a

del d:\autorun.* /f /s /q /a

del e:\autorun.* /f /s /q /a

c, d, e each represents drive letters on Windows system. If there are more drives or partitions available, continue to command by altering to other drive letter. Note that you must also clean the autorun files from USB flash drive or portable hard disk as the external drive may also be infected.