Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Enabling Autorun after Combofix


  • Please log in to reply
3 replies to this topic

#1 UED

UED

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:57 PM

Posted 04 November 2011 - 03:46 PM

Hello all,
I think, I have found the best forum for support :)

I use Combofix for years and I need to say: It is great, it is better than any professional Antivirus-software (ok, I am using antivir too ;)).
Yes, I have read the instructions completely before using Combofix and I have read the "How to use Combofix".

But I am very missing the autorun option since I have run Combofix Posted Image
If I put a game/software disc in the PC... the icon is not loaded (in workstation) and autorrun does'nt load/start the Autorun.inf .
I know, it is a big risk to enable autorun, but I want it back, REALLY :(
My discs aren't infected and my USB sticks are clean. And if not: The risk is worth it.

I have found on internet this text. I had to save it as registry-file and execute. It didn't help, no changes.
REGEDIT4
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom]
"AutoRun"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDriveAutoRun"=dword:00000000
"NoDriveTypeAutoRun"=dword:00000000
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDriveAutoRun"=dword:00000000
"NoDriveTypeAutoRun"=dword:00000000

Oh, I have Windows 7 x64
PLEASE help me to re-enable autorun Posted Image

Edited by UED, 05 November 2011 - 05:52 AM.
Moved from Malware Removal Logs to AV, Firewall, etc.


BC AdBot (Login to Remove)

 


#2 UED

UED
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:57 PM

Posted 06 November 2011 - 10:47 AM

OMG problem solved :)
I needed to delete the following registry-key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]
@="@SYS:Software\\Swearware\\dump"
You can close it :)

#3 UED

UED
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:57 PM

Posted 03 July 2012 - 08:40 AM

Update: Now you need to remove two keys:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]


#4 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:07:57 AM

Posted 03 July 2012 - 09:24 PM

No one should be using ComboFix unless specifically instructed to do so by a Malware Removal Expert who can interpret the logs. It is a powerful tool intended by its creator to be "used under the guidance and supervision of an expert", NOT for general public or personal use. Combofix was never meant to be used as a general purpose malware scanner like SuperAntispyware or Malwarebytes' Anti-Malware which scan individual drives or different folders on a computer for viruses. Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again. When issues arise due to complex malware infections, possible false detections, problems running ComboFix or with other security tools causing conflicts, experts are usually aware of them and can advise what should or should not be done while providing individual assistance. Those attempting to use ComboFix on their own do not have such information and are at risk when running the tool in an unsupervised environment.
Please read Combofix's Disclaimer.


Edited by noknojon, 03 July 2012 - 09:24 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users