Endpoint Protection

Guys i don think all the drives will have autorun.inf by default.
It is always better to have tool instead of manually doing the same :)
Nice  upload by the way

I agree with VIkram...
I don't say the tool is bad neither he wanted to say anything about the tool..
But he was just explaining the ways of getting rid of it manually and how it works and why we face this issue.
By the way you don't have to do for all the drives if you disable autoplay and restart explorer ...it should work fine..

Vikram,
As you said we can delete the autorun file and delete the explorer and launch it again from the task manager.

But recently one our customer had faced the same issue due to virus, going to indiviual drive and deleting the files was hectic.

This tool really helped us in that instances.Thanks for the tool buddy.

 

 

Why exactly we get this open with

Every drive will have their own Autorun.inf which will point it to open c:/ or d:/

when a worm infects your machines it replaces that autorun with an additional line to open it with  \xxx.exe
so when ever you try to open you drive first the file will get executed then only the drive will open or in some cases won't open.

So when a Antivirus detects and deletes the file pointed in the autorun.inf the the location remains the same but the file is deleted..So when you try to open the Drive it first tries to execute the file ...which is not present...since it has been deleted by your AV..
Thats the reason we get "open with...."

In this case if you disable Autoplay and restart your explorer ( kill explorer.exe and again launch it from task manager ) or restart your computer.
It should work fine..

Thank you Ajju

 it will be valuable when deal with virus cases.