Dear All
pls help me
My Free edition Avast always popup this windows when i connect my usb pen drive.
I: is my pen drive
MALWARE BLOCKED
I:\autorun.inf
Infection: VBS:Maleware-gen
Action Deleted
Process: C:\Windows\system32\wscript.exe
Program Version : 5.0.545
Virus Definition :100522-0
Thnaks
It means your pen-drive contents an autorun virus. Please manually scan your pendrive with Avast(Right click on Drive I: and select Scan I:) and quarantine the viruses found.
It would be good if you install, update and scan with MBAM also.
The actual process involved isn’t infected, the autorun.inf file is taking advantage of windows processes to run a VBS script and it is the attempt to do this which avast has blocked.
wscript.exe - Sneaky way to start any VBS script. Many viruses use VBS files
Flash Drive Disinfector
Information and Download Flash_Disinfector.exe by sUBs from >here< and save it to your desktop.
[*] Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.[*] The utility may ask you to insert your flash drive and/or other removable drives including your mobile phone. Please do so and allow the utility to clean up those drives as well.[*] Wait until it has finished scanning and then exit the program.[*] Reboot your computer when done.
Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive plugged in when you ran it. Don’t delete this folder…it will help protect your drives from future infection.
Mirror download site, http://download.bleepingcomputer.com/sUBs/Flash_Disinfector.exe
Hi
What the source code … ?
The source code of what ?
The flash_disinfector didnt work for me. Because whenever i plug different USB the autorun.inf will appear again (AVAST blocking msg same with “kbaki” post) therefore i will have to open the flash_disinfector everytime i inserted a USB…and do the clean stuffs…
Strange is that when i did a full boot-scan of AVAST… it didnt found any virus… I have tried deleting all autorun.inf in my drives even the one created by flash_disinfector and still even i used new USB and plug it to my computer… the autorun.inf will appear again and delete again from avast and there will be hidden file created in USB “killervirus”
I have tested alot new usb already… and all these tested usb have now killervirus hidden file… 
so i assume my pc is infected with virus…can anyone help me? or the only solution is to format pc…?
You have to run it first for your system and then for each USB flash key that you have, it isn’t universal and it doesn’t run in the background.
If you use other peoples USBs then it may already be infected and the purpose of the flash disinfector is to prevent future infection, so the key must be cleaned first and then run flash disinfector to prevent reinfection.
So if it isn’t able to clear your system of an existing issue, try running another tool to see if we can’t get rid of that and then run flash disinfector again. Of course there is a possibility that this uses something other than autorun.inf.
If you haven’t already got this software (freeware), download, install, update and run it and report the findings (it should product a log file).
Don’t worry about reported tracking cookies they are a minor issue and not one of security, allow SAS to deal with them though. - See http://en.wikipedia.org/wiki/HTTP_cookie.
Also available a portable version of SAS, http://www.superantispyware.com/portablescanner.html, no installation required.
hi, thanks for the information. I have tried to use the MBAM that you mentioned and did scan on my drive c:, no luck it didnt found any malwares… and the autorun.inf virus notice still shows up in every usb…so i didnt go to the 2nd option…
I have read some other peoples blogs and posts and it seems that it can be deleted thru cmd and there are also some says that it is nowhere to be found so no fix… anyway, i fix my computer by restoring option. 
I would advise continuing with the second scan it wasn’t so much an either or, but to run both as they are likely to have slightly different signatures.
You could also try this tool - AutoRun.inf problems, etc. - Download and run Autorun Eater