Windows 10: Autorun.inf as virus by Microsoft Defender

Discus and support Autorun.inf as virus by Microsoft Defender in AntiVirus, Firewalls and System Security to solve the problem; Hi,I have create a custom autorun.inf which sets the icon and device label for the USB device.The contents of the autorun.inf are following[AutoRun]... Discussion in 'AntiVirus, Firewalls and System Security' started by Kunal Yadav kunaly, Mar 30, 2023.

  1. KUNAL YADAV KUNALY
    Kunal Yadav kunaly Win User

    Autorun.inf as virus by Microsoft Defender


    Hi,I have create a custom autorun.inf which sets the icon and device label for the USB device.The contents of the autorun.inf are following[AutoRun] ICON = .\tS1_img.ico label=myDeviceIt is being detected as a virus with the following information : Name: Trojan:Script/Wacatac.H!ml ID: 2147814524 Severity: Severe

    :)
     
    Kunal Yadav kunaly, Mar 30, 2023
    #1
  2. NEWTEKIE1
    newtekie1 Win User

    How can I remove this virus remnant?

    I was also going to suggest Autoruns.

    Check to make sure it isn't attaching itself to explorer. It should be the 3rd thing listed in Autoruns, the listing for the Shell. It should just be Explorer.exe. If it is anything else, that might be your problem.
     
    newtekie1, Mar 30, 2023
    #2
  3. RAMESH SRINIVASAN
    Ramesh Srinivasan Win User
    Is it normal for some Microsoft entries to appear as not verified on autoruns?

    Hi Sammy,

    This seems to be a bug in Autoruns. Please check out the responses from "markc(msft)Microsoft" in the following link:

    Quoting MarkC:

    I traced this to an issue with the way that autoruns handles protected folders. For Microsoft published binaries we have an additional validation step that confirms whether or not the binary is in a protected system folder. For ProgramData this is not the case. The Windows Defender folder however IS locked down so I'm just waiting for confirmation from Mark R. that it's OK to add this and I'll get the fix updated.

    Alternatively, you can run SigCheck.exe to know if the binaries are signed or not.

     
    Ramesh Srinivasan, Mar 30, 2023
    #3
  4. MKNAWABI
    mknawabi Win User

    Autorun.inf as virus by Microsoft Defender

    Just when you think MS is getting a little Smarter/Microsoft kills off autorun

    I really don't understand how some are complaining about autorun being disabled. For USB drives, it will pop up a dialog asking you whether you want to view the folder or not. Is that seriously not good enough?

    For CDs however, microsoft stated that they would still allow the autorun function to be listed as an option in the dialog.

    Autorun is a pretty big security risk, and Microsoft is saving a lot of headaches from the IT crowd for this.
     
    mknawabi, Mar 30, 2023
    #4
Thema:

Autorun.inf as virus by Microsoft Defender

Loading...

  1. Autorun.inf as virus by Microsoft Defender - Similar Threads - Autorun inf virus

  2. Microsoft store inf loading

    in Microsoft Windows 10 Store
    Microsoft store inf loading: Im trying to update my xbox app so i can get game pass but whenever i try to update my xbox app it leads me to the microsoft store which is inf loading. I TRIED EVERYTHING PLEASE HELP ME...

  3. Winscomrssrv.dll Virus not Showing in Autorun App!

    in Windows 10 BSOD Crashes and Debugging
    Winscomrssrv.dll Virus not Showing in Autorun App!: I followed this Winscomrssrv.dll virus Fix instruction but it did not work https://answers.microsoft.com/en-us/windows/forum/all/winscomrssvdll-error-at-startup/fa88918c-8f79-4cbc-8a1f-90fdc349418d But this Winscomrssrv.dll error is not appearing in the autorun app list. I...

  4. autorun virus removal

    in AntiVirus, Firewalls and System Security
    autorun virus removal: I found out that my USB has a file called autorun.inf. I first thought that it was a windows feature to autorun the installation as previously I had used the USB to create an installation media using the official tool. I asked this question on another website and got only 1...

  5. Microsoft Defender Virus Definitions

    in AntiVirus, Firewalls and System Security
    Microsoft Defender Virus Definitions: Does Windows Defender contain virus definitions for Mac, so that if I scan a file on windows that has malware targeting Mac, it will detect it? https://answers.microsoft.com/en-us/windows/forum/all/microsoft-defender-virus-definitions/3ecfc677-1756-4a54-be56-d0b7992b46ee

  6. Microsofts Defender Anti-Virus

    in AntiVirus, Firewalls and System Security
    Microsofts Defender Anti-Virus: I have been using Malwarebytes for years. It seems like there is a conflict with it. It turned off my Windows Defender anti-virus. Malwarebytes is not an Anti-Virus Program...What Went Wrong?...

  7. Microsoft Virus Defender

    in AntiVirus, Firewalls and System Security
    Microsoft Virus Defender: So, I downloaded a scripting program that I bought. I deleted it after Microsoft Defender says that it was a Trojan. However, when I go to check the windows defender and see affected items, it says file: C:\Users\ahu\Desktop\Synapse-X\Synapse-X\bin\THbrbTTfRRPrQeVN2.bin...

  8. Microsoft Virus Defender

    in AntiVirus, Firewalls and System Security
    Microsoft Virus Defender: So, I did a scan and my Microsoft Defender says that there are two viruses as seen in the picture below. When I go to start an action, it filled automatically Manual Action Required. I switch it to Remove for both of them, click start action, and they are not removed. How can...

  9. Autoplay (or is it autorun?) issue with mounted images inf ignored

    in Windows 10 Support
    Autoplay (or is it autorun?) issue with mounted images inf ignored: So after re-installing daemon tools (i didnt get the memo that sptd got perma broken with windows 1903) I discovered (likely an issue prior, just noticed now) that I wasnt getting the icon in my navigation pane for whatever iso I mounted. this was further determined to not...

  10. Blocking execution of Autorun with Windows Defender?

    in AntiVirus, Firewalls and System Security
    Blocking execution of Autorun with Windows Defender?: Is there a way that Windows Defender can automatically block the execution of Autorun commands once a USB flash drive or a DVD is inserted on a computer? 131634