USB Autorun Blocker – Prevent Virus Infection From Pen Drive

Trouble:

Most of the virus infections are caused due to virus spreading through pen drives, memory cards and other USB drives. Many of these viruses use autorun.inf viruses which cause the infection because of a small autorun.inf files which triggers the virus files on your pen drive.



When you double click on your USB pen drive icon to open the drive in windows explorer these autorun.inf files run the viruses files and copy them to your computer to cause virus infection.

in this post we will talk about a tool called “USB Autorun Blocker” to protect your computer from pen drive viruses.

Lets find out how does this tool protect your computer from autorun.inf viruses.

Fix:
USB Autorun Blocker is a very light program, low on eating system resources. It gets loaded automatically into system memory.

How does USB protects from viruses in USB pen drive?

When ever you connect a new drive to your computer which contains autorun.inf viruses, it automatically renames autorun.inf files on the device and changes the attribute of autorun.inf file to be normal and visible to the user.

As a result you can delete the autorun.inf files on the drive and also delete all other virus files on the USB drive, whose names are their in the autorun.inf files code.



Click here to download USB Autorun blocker

[How To Recover] Registry Editing Has Been Disabled By Your Administrator

Here are two ways to enable the registry editing in Windows.

1- From Group Policy Editor

Go to Run –> gpedit.msc

In the left hand menu, go to User Config –> Administrative Templated –> System.

Now In the right hand pane, select “Prevent access to registry editing tools”. It will probably be not configured or enabled. If it’s enabled, disable it and if it’s not configured, first enable it, apply settings and then disable it. Most probably the settings have been applied instantly. If not, then run gpupdate in command prompt to apply the group policies.

2- From the Run Menu

I got this tweak while surfing the internet. Go to Start –> Run, copy and paste the follow in the Run box and press OK.

1.REG add HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem /v DisableRegistryTools /t REG_DWORD /d 0 /f

The effects are usually instant. If not then you should see the results after restarting your computer.

[How To Remove] ntde1ect.com And autorun.inf Files

There is a Trojan/virus (either the Win32/Pacex virus or the Win32/PSW.Agent.NDP trojan) that uses the two files ntde1ect.com and autorun.inf. Here is how you can get rid of them :

* Open Task Manager and in Processes tab end explorer.exe and wscript.exe process
* Open up File –> New Task (Run) in the Task manager
* Type cmd and hit Enter
* Type

del /a:h /f c:autorun.*

* Go to your WindowsSystem32 directory by typing

cd c:windowssystem32

* Type

dir /a:h /f avp*.*

* If you see any files names avpo.dll or avpo.exe or avpo.exe, use the

Del /a:h /f avpo.exe

* Open up File –> New Task (Run) in the Task manager, Type

regedit

* Navigate to

HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun

* If there are any entries for avpo.exe, delete them.
* Do a complete search of your registry for ntdelect.com and delete any entries you find.
* To Restore Folder Options Settings, Navigate to

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedFolderHiddenSHOWALL

Look at the “CheckedValue” key. This should be a DWORD key. If it isn’t, delete the key. Create a new key called “CheckedValue” as a DWORD (hexadecimal) with a value of 1. The “Show hidden files & folders” check box should now work normally.