Andrew Sanders
Updated on: December 21, 2023
Autorun.in is a virus that is usually spread through infected external devices like USB drives. Once an infected USB disk is introduced to your system, the virus can destroy your computer, self-executing files, destroying important documents, and replicating itself so that it is hard to remove.
How To Know If You Have Been Infected
Here’s the crazy thing about Autorun.in: although the virus’s main tactic is to automatically launch programs, you might not even know if it’s on your system. The program can both automatically launch programs and then dictate what actions they will automatically take.
So, a new browser window may automatically open that instantly downloads a piece of malware which automatically installs itself. This could happen in a few seconds and repeat itself until your system is nearly unusable.
If you notice a series of suspicious programs automatically launching or important documents mysteriously vanishing, then you should take immediate action.
Step 1: Follow The Manual Method
You should begin by ensuring that all traces of Autorun.in have been safely deleted from your system. It requires knowing some basic Windows command line prompts.
- Boot your computer in Safe Mode and select the “open a command prompt” action. The safe mode option should appear towards the bottom or top of your BIOS/UEFI screen, which appears immediately after turning the computer on.
- Delete all of the following files:
- %System%configcsrss.exe
- %WinDir%mediaarona.exe
- %System%logon.bat
- %System%configautorun.inf
- C:autorun.inf
- D:autorun.inf
- E: autorun.inf
- F:autorun.inf
- inf files in all drives.
Next, open the Windows Registry Editor and delete the following parameters:
- [HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
- DisableTaskMgr = 1
- [HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer]
- NoFolderOptions = 1
- [HKLMSOFTWAREMicrosoftWindowsCurrentVersionRunOnce]
- “Worms” = “%System%logon.bat”
- To finish, reboot your computer
Step 2: Install An Antivirus Solution and Scan
While the manual method will hopefully be enough to remove the virus, there’s a strong chance that Autorun.in has introduced secondary payloads (viruses or pieces of malware) that the above method will not delete.
Your best course of action is to install a reliable antivirus solution to immediately conduct a full system scan. This will root out any other malware that hackers may have introduced.
Here are the very best tools for the job:
Norton
Norton has a phenomenal award-winning virus scanning engine. Its advanced SONAR real-time protection and automatic scanning of external drives will give Autorun.in zero chance of overtaking a system.
Bitdefender
Bitdefender features a real-time vulnerability scanner and advanced antivirus detection. It can block Autorun.in and secondary payloads it may have downloaded.
Avira
Avira deserves an honorable mention for its virus detection features—although I think that Norton is a slightly better choice. Its award-winning malware protection will detect viruses, trojans, and worms and its smart artificial intelligence (AI) and deep learning backed algorithms will protect against the latest threats.
What Can You Do Next?
To avoid a second encounter with the virus, you should:
Disable the Windows Autorun & Autoplay Configuration:
- Click the ‘Start’ symbol
- Type Gpedit.msc into the search box and click on ‘ENTER’
- Under “Computer Configuration,” expand “Administrative Templates,” “Windows Components,” and then choose “Autoplay Policies.”
- Under the “Details” pane, double click “Turn Off Autoplay.”
- Restart the system.
Never Insert an Untrusted USB Drive into Your System:
Plugging in unknown USB drives is risky. While an antivirus can provide some protection, it’s always best to avoid introducing any unknown external devices to your system in the first place.
