Autorun.inf + Recycle Bin virus – removal and prevention


To remove the virus 1. Open Run 2. Open CMD 3. Terminate explorer.exe process in task manager. 3. Navigate to pendrive and use “del autorun.inf” command. If it says “Can’t find autorun.inf” type “attrib -h -r -s” and repeat the command. 4. Navigate to C:/ Documents and Settings/ Your username directory and type “attrib -h -r -s” 5. Type “del csrss.exe”. If it says “access is denied” terminate every process running under your username and repeat the command. 6. Restore explorer by typing “start explorer”, go to the pendrive and delete the recycle bin folder. To prevent pendrive viruses in the future, download a free program called “Autorun Eater” from oldmcdonald.wordpress.com Alternatively you can disable the AUTORUN feature: 1. Click Start, click Run, type regedit in the Open box, and then click OK. 2. Locate and then click the following entry in the registry: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoDriveTypeAutorun 3. Right-click NoDriveTypeAutoRun, and then click Modify. 4. In the Value data box, type 0xFF to disable all types of drives. Or, to selectively disable specific drives, use a different value as described in the “How to selectively disable specific Autorun features” section. 5. Click OK, and then exit Registry Editor.

This entry was posted in virus removal and tagged , , , , . Bookmark the permalink.

25 Responses to Autorun.inf + Recycle Bin virus – removal and prevention

  1. hugoseller says:

    Am Seller Cvv..Dumps + Track 1/2..Acc Paypal..do WU transfer + Bank login..Ship shop all
    ———————————-
    who need contact me
    Yh : hugo_sellercvv or Email : hugo_Sellercvv@yahoo.com.vn

  2. wisevirgin says:

    Great music in the background! Sounds like someone could use it for a porno flick creation, LOL!

  3. FUCKINROCKIT says:

    sometimes I like to sit in the corner and pretend I am a potato.

  4. RETROGAMER43 says:

    Whats with the porn music lol.

  5. lostboy8080 says:

    thanks! it worked to me but everytime i re-start my pc the virus autorun comes again to my drive c and also in the drive d. can u help me more to solve this probs. thank again

  6. SchijtXD says:

    use unhackme
    it worked to me =)

  7. xtan1001 says:

    thanks great video
    i just removed a virus from a guys pc thanks

  8. jackiechan123ful says:

    @damastah100 nothing happens

  9. jackiechan123ful says:

    @damastah100 no nothing happens

  10. jackiechan123ful says:

    @damastah100 nothing comes up i push alt+ctrl+del and nothing

  11. damastah100 says:

    @jackiechan123ful
    does it say “Task Manager has been disabled by your administrator” I need to know so I can tell the solution.

  12. jackiechan123ful says:

    my task manager doesent pop up what should i do?

  13. likedatskill says:

    Quick thing to add :

    When I look through my USB I don’t see any sort of recycle bin. Is it hidden or anything ?

  14. likedatskill says:

    Can you offer any insight on this virus :

    Gen:Heur.Minggy.1

    It says the infected file is Recycler but do I proceed with the steps you have in this video ?

  15. SchijtXD says:

    download unhackme i detect it by myself but i cant remove it so i searched on google and i found the program.
    1. install unhackme
    2. run a online multi scan
    3. then reboot your pc (dont be scared as after starting windows your screen is black)
    4. let the program scan your pc(may you will reboot your pc a serval times)
    5.delete the virus folder
    6. go to your real recycle bin and delete evertthing in it
    7. its gone!!!!

    before rebooting make the folder visable

  16. TheVirushelper says:

    AVG Internet Security 2011 10.0.1153 Serial ’til 2018

    8meh-rqkos-ry94r-fkpya-2xcch-s­­embr-aced

    8meh-rqpo6-7zs98-hgy9a-flacg-x­­embr-aced

    8meh-rut9q-4fz2r-px2xa-tgvu6-l­­embr-aced

    8meh-rbg6h-9c2pw-g499a-lghxn-8­­embr-aced

    8meh-rlkzo-8cqhh-hsyka-kkmoa-s­­embr-aced

    Malwarebytes’ Anti-Malware pro 1.51 id 5RN76 and key 3MG2-GK2K-DF98-RDTU

  17. MsSportingclub says:

    I found virus colled rootkit how can i remove it
    my anty firus cant delet it
    i found too much Desktop.ini – recycle.bin-Thumbs.db
    what this strang name $RECYCLE.BIN!!
    i know RECYCLE but what is “$” RECYCLE.BIN

  18. Adelnoir says:

    I can’t complete your 3rd step: I type “G:” then “attrib -h -r -s” and it says “access denied – AUTORUN.INF”. Then, if I try to type “del autorun.inf”, it says it can’t find it. Can you help me?

  19. thelinuxgeek95 says:

    dude ur rite about the maware part

  20. thelinuxgeek95 says:

    i fha this virus on my pen drive it was on my fathers mothers sisters mine computer i reinstalled windows and put de flash in mother laptop and deletion auto run.ini and
    quick le remoed the usb

  21. waikai3 says:

    Please help me I’ve got a virus! youtu. be/WbOBmL Kr5Vk?hd=1

  22. Darkstorm854 says:

    Usually autorun.inf hide in the C: just for you to repeat the same mistake and double click it causing a more infection

  23. sziniczhe says:

    6. step – when you choose taskmanager application new task browse, then do not click ”open”. When you know where the file is you can delete this virus file. ***

    That’s all i wan’t to say. :D

  24. sziniczhe says:

    1. Download autorun eater
    2. Clean your flashdrive
    3. Use taskmanager & search to find the virus file location
    4. Turn off explorer
    5. File with virus start working, kill it (with taskmanagers end process)
    6. Taskmanager – application – new task – browse – (the virus location & delete the file with virus)
    7. now run the windows explorer with taskmanager new task or CMD
    8. Clean / Delete the fake recycle bin.

    Sorry about my english, but i hope that anybody understand. The video is (Y) Thanks!

  25. kingwayne30 says:

    Wow, imagine if you went to loads of places putting the pen drive in, school, libarary, friends house XD

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>