Link to home
Start Free TrialLog in
Avatar of Arman Khodabande
Arman KhodabandeFlag for Iran, Islamic Republic of

asked on

A Question About Folders!

Hi experts!
If you're looking for a new challenge read this!
It's just about creating folders!

I have a flash memory security software that creates a non-deletable folder called autorun.inf in removable storages!
This autorun.inf folder prevents viruses to write their own inf file to the disk! A nice idea!
But how it works is important:
Inside the autorun.inf folder exists a directory called"immunity." and can not be modified in anyway.
When I want to enter it I see the below error message. (See the attached file)
It seems to be some kind of shortcut! (but not a regular one)
I want to know how to create such a folder!

What's your opinion about this?
I appreciate any guess or comment about this!

You can find more info on this link.
In the comments I've answered some questions and clarified more.

P.S. I wrote this question because of suggestion of Moderators. I hope not to be considered as "Double Questioning"!
immunity-properties.JPG
folder-unavailable.JPG
Avatar of Radhakrishnan
Radhakrishnan
Flag of India image

Autorun.inf is generally is a virus generated file, If your flash drive getting autorun.inf file then it is indicates that your flash drive is infected with virus. Better option is format the drive or if you have any important file or folder on this that will not work until the infection get removed. Follow the below procedure in case if heps you to resolve the issue.

Also, Sorry i am not able to find from anything from your screen shot since it just showing 1 folders properties and the error message while accessing it , unfortunately it will not help us to identify your exact issue.

1. open up a command prompt (i.e. cmd.exe) >> to load it go to Run, type cmd, enter.
2. Now to remove virus's attributes (in order to delete it type following line by line and execute them pressing enter.
e.g.
F:\
F:\attrib -s -r -h *.* If there are any malicious EXE files those are now visible so if unnecessary delete them too.
F:\del autorun.inf

Please let me know your thoughts.
3. After finishing above, quickly remove the pen as soon as posible (just after executing del command).
4. Now your pen is without virus activation config. file. Now you can safely delete unnecessary EXE files on it.
SOLUTION
Avatar of Steve Knight
Steve Knight
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
You can simply disable autorun function on removable drives
http://autorun.moonvalley.com/enable.htm
Also,most antivirus software prevent their execution.
Also autorun.inf is not a virus but a tool to trigger already existing virus.
Mind you, that file can also be very usefull. So it is up to you.
If you are affraid of the negative possibilities then just disable
the entire function. No big deal ....
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Arman Khodabande

ASKER

Thanks for response, But you all answered irrelevant.

@radhadkrishnan
I said that "autorun.inf" is name of a folder. It's a folder to prevent the Bad INF files from being written to the drive.
I know all about the precautions and viruses.
We're not dealing with viruses here. !
User generated image
@Dragon-It
I can Rar the folder. I thought about it!
But after extraction of that RAR Archive the "immunity." or "zhengbo." folder becomes accessible and loses its original characteristics!
So there's no point in sending such a file.

@Danch99
In all service packs of windows XP autorun.inf files are welcomed and will be executed! So we have to disable the autorun manually.
I myself use Windows XP SP3.
Only windows 7 and vista do not accept autorun.
And about your question I should say that: Human always wants to know what he doesn't know.! It's in our nature!
I want to know the trick behind this. It's too bad for experts if they can't handle such a simple trick with folders. . .

@senad
Your answer was completely irrelevant. Please read the question carefully. It isn't an "INF" file but it's a folder.
But thanks for your reference.

Thanks to all. I'm waiting for your new responses.

autorun.inf-folder-all.JPG
if I am not mistaken,you wrote :
"This autorun.inf folder prevents viruses to write their own inf file to the disk! "
autorun.inf resides on root drive and not in folder.
so your 'folder' is useless as these files get written to root drive.
if you place autorun in a folder it will not work.
I really do not know what your autorun folder is all about.
What's its function ? Certainly not in preventing autorun.inf from triggering viruses from spreading.
But if you believe that ....its ok.You're entitled to think whatever you want.


SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hooray !
I found out how to create a folder starting with a Dot!
I knew the solution for years but never tried it! It can be created via Dos commands. (MD command)

But I couldn't create a folder ending with a dot.
So I searched again and tried hard! I found out that there is a file manager called "Ztree" it's capable of renaming folders to add Dots to the end of names!

And I read somewhere that you can use win api to creat such a folder!
So that security software have used the second way.
Thank you all.
Good luck
I can easily create files and dirs with . at the beginning easily enough in cmd.exe prompt or any language such as VB, VBA, VBScript.  Can create files ending in dot BUT they are seen as files with no extension.  What you want is to create it with the filename part with a dot in I think... then anything that tries to access it will split it at the . for extension I guess and break... this is assuming file / extension are stored seperately.

Everything I have tried will translate the . on the end into nothing but a non extension file.
Do you know a way to create them for windows script host (vbs files)? Because I'm not familiar with VB itself!

files with no extension are not needed! We need a folder with a dot at it end.

If you want to see a dot at the end of a folder name, download Ztree and rename a folder with 2 dots after it's name.!
dot at the start is easy... dot at the end every way I know if is treated as a file/folder with no extension rather than a dot in the name.  If I find a way will post.

Steve
Thanks Steve
No problem, at least I knew what yiou meant!

If you find a good way of creating them perhaps you could post it here for all of us.
OK, I can understand some technical curiosity about how to create an undeletable folder, and that's an interesting discussion point.  I still say that security software that uses this as a defence against malware has missed the point.

Here's the article about how MS disabled AutoRun
http://technet.microsoft.com/en-us/security/advisory/967940

and some criticism of their method....
http://blogs.computerworld.com/the_best_way_to_disable_autorun_to_be_protected_from_infected_usb_flash_drives

They didn't miss the point, because that security software (Zbshareware USB Disk Security) has removed this feature in it's releases since 2010.
Now I understand why . . .
I always asked myself why did they removed this feature from their software . . .
However I doubt that. Because when I installed my Windows xp (SP3) it ran the Autorun on USB drives (As far as I remember). I disabled it manually.
Maybe you want to prevent viruses from writing their autorun.inf to your flash (If you connect your USB drive to an infected PC). Microsoft has disabled the autorun. But what if you double click on your drive by mistake?!!!!!
It will absolutely execute the virus, because it's the default option for double clicking!

I'm still looking for a way to make a folder using Windows Script host commands. (I just want to know. I've already created a super folder with com folder)
As far as I know WSH accepts VB commands and many more languages like java.

Thanks for reference
Kpax7