Posted on Wednesday, 19th March 2008 by Jimmy Auw
I was on the meeting, and suddenly all the attendees infected with a 3o.exe trojan. This was due to an USB Flashdisk. The trojan infected all automatically (and silently) by using the autorun.inf script. It executed all the trojan scripts without anyone realized it (until finally one of us realized).
I will not talk about how to remove the virus (it’s quite easy actually, just enter the safe mode, delete all the amvo.*, 3o.exe, autorun.inf, and some *.cmd file). But I will talk about how to disable the autorun.inf auto execute so we can prevent the virus or trojan to self install when we plug our USB.
Please be noted that this method is not the same with removing AutoPlay function.
Disabling AutoPlay function will not prevent your system to run the autofun.inf automatically. So if you are thinking that you can make your system safe by disabling the AutoPlay, then you have to think it twice!
I got the useful link from here.
Scott Dunn on the website suggests to use this simple script below. This will make Windows to ignore the autorun.inf file forever for all devices (so no more silent install or silently running application).
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]
@=”@SYS:DoesNotExist”
Just copy paste the script above to a text file and rename it to .reg file. Double click to run the script.
Or you can click here for the script file (zipped). Extract the unregautorun.zip and you will get unregautorun.reg. Double click on the unregautorun.reg and click “Yes”. Done!
The bad thing is… You will no longer receive pop-up menu to install by the default installer (a game or software CD most likely use this feature). You have to explore manually to your CD and click the necessary file (setup.exe or install.exe).
Posted in IT/Gadget | Comments (3)






12B4 with Clear Top?
Another 6CG7/6FQ7 Clear Top
RCA 6FQ7 Clear Top
Extra LM1875
Audio DIY Gathering at Bintaro, Indonesia
Disassembly Hickok 539B
Vintage MilliAmperes Meter Repair
Cleaning Up My Hickok 539B Tube Tester
Hickok 539B Tube Tester
No Brand “300B Western Electric-like” and Valve Art/Shuguang Mesh 300B
Measurement Meter Comparison
Dual Pairs of Duelund CAST Capacitors!