How To Remove Autorun Viruses

There are several autorun viruses spreading via USB pen drives.Most of the viruses execute malicious codes such as svhost.exe through the autorun.inf file.

Even many anti viruses like AVG free version cannot detect these viruses.

If your....

1.Task manager disabled.

2.Folder options disabled.

3.Show Hidden files in the folder options not working.

4.If there are folders named svhost.exe or folders ending with the extension .exe.

5.If there are Autorun.inf files in your pen drives or hard drives.

6.If you get the "open with" dialog box when you try to open a drive.

7.If there are unusual files in your pen drives or hard drives which you have never copied.
8.If you can see the process bar311.exe in the Task manager processes.
this guide is just for you.

1.Uninstall your current Antivirus program specially if you have installed AVG Free Edition.
2.Download and Run Noob.Killer program.

About Noob Killer free software
Noob Killer is a small tool designed to easily rid common worms and viruses, it has many useful tools that would help users and administrators get back control and clean their PC´s/Workstations.

The most recent version is able to pick up and remove the Following || possible new and Old versions.

* VBS Worm\Solow
* Baguio Strawberry Worm
* Yahoo! Worm (Sohanad) || Some Variants
* Krag.exe (I´m Not The Only One)
* Destrukto | explorar.vbs
* jay.exe | jaymykawen9
* w32dranyam | marcmaynard.exe
* Funny UST Scandal(Avi).exe
* SilentSoftech.exe | anti-taga lipa are
* Disk Knight
* Thank You!! Password WinZip123 | password_viewer.exe bar311.exe
* iloveher.exe | say no to drugs!!!
* display monitor.exe | new folder variant
* ImgKulot and variants, jamesgo, bungoton and the like [*.bat, *.reg, *.vbs collection]
* kxvx | kavo, amvo, kevo
* transmit.exe setup.exe | black pegasus
* .. and still counting!

Written in Visual Basic, Initially it was only for cleaning and removing VBS\Worm.Solow variants, popularly known as “Hacked by Godzilla” and “Taga Lipa Are” which that spreads through removable mass storage devices(flashdrives and thumbdrives) via Visual Basic(VBS) and autorun.inf scripts.

The Noob Killer now caters a hefty amount of worms and viruses listed for cleaning, with the current active development, the list is still counting everyday.

Armed and packed with tools to help remove other Viruses and worms, aiding users to gain back control of their computers and workstations.

The latest build currently has the following tools:

* Run replacement | similar to MS Windows run
* Run Items | shows run items on startup | with delete and backup functions.
* Simple Process Explorer, able to close down Processes hidden on the standard Task manager.
* Delete File on Restart | similar to Unlocker, Hijackthis, MoveOnBoot programs.
* Create Copies of Windows Native TroubleShooting Tools such as
* Msconfig, CMD, regedit, taskmanager

List of registry hotfixes that restores settings on the registry that has been modified by viruses causing severe errors and usability impairment.

* Folder Options
* Task Manager
* Regedit
* Control panel
* Task Bar Right Click
* IE Title Bar Caption
* and Turning on\off of autorun on CD Drives, and Flashdrives respectively.

The Handy Live update feature allows users to update their Noob Killer with just a few mouse clicks within the Program itself.

Currently, the production is trying to make the Noob Killer Compatible with new and old systems, keeping the Program, small, portable and non bloated for effiency and importantly Speed.

The Noob Killer is under testing on Windows Vista, working for support to get things running properly, it has been tested under WINE on Linux and is able to run smoothly without too much quirks.

Download(315 KB)

3.Update Noob.Killer by selecting "X>Live Update Now!"

Remove_Autorun Viruses_open_with_dialog_when_try_to_open_drive

4.Select "8-X Kill All" and Restart.


5.After the restart Run the Noob.Killer again and Select
"Tools">"Registry Patches">"Enable ALL"

Remove_Autorun Viruses_open_with_dialog_when_try_to_open_drive
6.Install Avira Personal Free Edition 8 AntiVirus
7.Update the Antivirus and Do a Full System Scan.
8.Delete every virus file such as svhost.exe and autorun.inf.
9.Disable Auto run on all Drives.
10.Click Start and then click Run.
11.Type gpedit.msc and click OK.

12.The Group Policy window will open. In the left pane, double-click Administrative Templates.

Remove_Autorun Viruses_open_with_dialog_when_try_to_open_drive

13.In the right pane, double-click System.

Remove_Autorun Viruses_open_with_dialog_when_try_to_open_drive

14.Scroll down the list and double-click Turn Off Autoplay.


15.In the Turn Off Autoplay Properties window, select Enabled. From the dropdown next to Turn Off Autoplay on, select All drives and then click OK.

Remove_Autorun Viruses_open_with_dialog_when_try_to_open_drive

16.Exit Group Policy by selecting File, then choosing Exit from the menu.
17.Restart Computer.
Make Sure to scan USB pen drives everytime before opening.

Share this

Related Posts


10.10.10 delete

Hi, There is a very simple solution for USB Pen Drive Infected with Autorun virus. Just install Autorun eater (Version 2.5) from I using this on my Pc and it works great. When you insert the USB Pen Drive in USB Port, the AutorunEater scans the pen drive and ask for your action if it found the autorun.inf etc. Use it its a great simple & software and its Freeware....

There was an error in this gadget