[jeremyocm]

Hi actually I solve this problem by searching through this forum.

http://forums.techguy.org/windows-nt...-c-double.html

Before this I run a virus scan on my external hard drive, major infection from another computer, manage to clear those using the anti-virus.

I downloaded the program Flash_Disinfector.exe from devil_himself post.

Would just like to find out more about the Flash_Disinfector program. How does it work? Does it edit certain files in each of the hard drives, or edit the windows registry?

I assume it had to restart the explorer.exe process or otherwise the win desktop wouldn't have to go blank for a while.

Or is this not the right place for me to ask this question. If you guys don't mind, can just give me a few pointers (links) on how I can learn more.

Thanks.

[Byteman]

Hi,

Here is some info about how and what the disinfector does

http://www.troublefixers.com/remove-...h-disinfector/


Stops the spread of worms that use the autorun.inf method of running and infecting other drives, computers, etc.

Installs a special autorun.inf that is more secure....if we can accept that what this person repeats is true: (it does concur with what I already know about the tool...we have used it for quite some time)

Things similar to autorun come up constantly- so much of Windows can be tweaked, but the consequences are quite real, as well.... all in all, some folks just won't accept that security is good but can result ina performance hit.....

The disinfector does not do anything with the registry - it does not remove the mountpoints or anything similar (mountpoints are recreated as necessary by windows anyway) or disable autoruns, it does place a secure autorun on each drive though to prevent further infection. It does this by making it near impossible to write another autorun file, this may be where the problem lies. If you are happy for your flash drive to autorun then delete the current autorun - but you will then be unprotected from malware. Would you rather access the USB drive manually or trust to luck that it is not infected and save yourself 10 seconds

You will note that they were discussing whether Flash_Disinfector is the best tool to use.... some wrong information was posted, but it was corrected and things were settled. Some members there felt the disinfector was too "strong" etc....

[jeremyocm]

Thanks for the reply.

From what I can understand, no registry settings are modified by the Flash_Disinfector.exe.
Rather a new copy of the autorun.inf file is saved into each drive and it is "secured" to guard against overwriting by a malware later on?

Is what I have written above, correct so far?

My problem was to correct my external drive not being able to open by double clicking, which was resolved by running the program. But the original thread I referred to was for the local drive. I thought my local drive may also have a autorun.inf.

So while my external drive has a visible autorun folder, my C drive doesn't (though I haven't any problems double clicking it open). As a matter of curiosity, I enable the view for hidden files and folders, (assuming C drive is my root directory) but am unable to locate any autorun file for my local disk.

I think my anti-virus (AVG 8.0 Free) disabled the autorun feature, and I heard from my friends, bad idea to let any drives autorun. So I am pretty happy with this configuration.

Before I hit on this thread, I tried to open the drive by browsing in the "open with" window to the explorer.exe process in C:\windows and it opened, but of course the option was only valid once and next time it was double click, the process had to repeated. The option "always use the selected program to open this type of file" was grayed out.

questions:
1. How do you secure a file from editing by malware?
2. Is C drive the root directory for XP or is it C:\windows? And where can I locate the autorun.inf file in the root directory if there is one?
3. If the autorun file does exist, does it need to be open by the explorer.exe process? Is that how all the drives are opened by double clicking? A autorun file run by the explorer.exe?
4. Anyway I can understand the inner workings of the Flash_Disinfector.exe?

Thanks in advance for any reply, and just let me know if I overstep this thread. Once again any links to read up would be appreciated.

[Byteman]

Hi,

Take a look through some of these Google results links for info on Autoplay and Autorun

http://www.google.com/search?hl=en&r...ed&btnG=Search

Myself, I like to have nothing happen when I put a CD in a drive tray... And, I really hate the drives that close in 2 seconds, half the time I don't have the disk set in the tray well and it grabs either me or the disk...I really hate that kind of drive!

And, I don't neccessarily want the CD drive to start spinning the disk at the moment it goes in the tray. And, I don't want the wizard popping up with all the choices that can be adjusted...so I have the whole works Disabled.

Autorun I have differently....see how many autorun.inf files I found using Search just now....

I can't really say why they exist...something made them, I didn't, I did not really know they were present....

I'd bet the one in My Documents is there so that folder automatically opens in Explorer view....

[Byteman]

Hi,

The correct patch and method to disable autorun/autoplay and information about the difference between those two things is discussed here:

http://windowssecrets.com/2009/03/05...g-for-XP-users

There is good accurate information for the newer versions of Windows in the same article and you need to read thoroughly to make sure you get the full directions for your version.


There is information on how to switch between enabling and disabling autoruns in case you need to.

[jeremyocm]

Thanks for the info.

Sorry haven't been able to look into until now.

piles of work....