Forum Home
Press F1
 
Thread ID: 95295 2008-12-01 10:34:00 Do recovery partitions usually have autorun.inf files in them? Speedy Gonzales (78) Press F1
Post ID Timestamp Content User
724667 2008-12-01 10:34:00 I'm helping jbmcgee in here, (remotely with teamviewer), with his/her prob (trying to get HDMI audio to work) and not getting far lol

I did a scan with trojan remover and its picked up info.exe and autorun.inf, which it detects as suspicious

Ive left both there for now, just in case they need to restore it or make a cd/dvd (and both maybe needed)

Any ideas guys / gals?

I wouldnt have a clue, I've never had to use a recovery partition
Speedy Gonzales (78)
724668 2008-12-01 12:17:00 Open the autorun.inf file in notepad and copy and paste here.
Sometimes they can get infected but once you open it with notepad you can see clearly what it is.
Blam (54)
724669 2008-12-01 18:47:00 I tried that trick, but all it did, was bring up a window saying warning. It was the recovery partition and changing things (in other words) could screw things up

And no matter what I did it didnt change / or open (the partition). So, I cant see whats in the autorun.inf file
Speedy Gonzales (78)
724670 2008-12-01 19:13:00 How about booting from an Ubuntu boot cd so the recovery partition isn't mounted? You should be able to open it from within that? nofam (9009)
724671 2008-12-01 19:32:00 They could try, they'll have to download it first.

The main prob at the mo, is trying to get the ATI HDMI Audio drivers to work!

The drivers that they've installed SHOULD work (well the drivers install the HDMI Audio drivers on this).

Only diff is, this PC has Realtek HD Audio, theirs is AC97.

So, I dont know if thats why HDMI Audio isnt working (because their system is AC97, not HD Audio)
Speedy Gonzales (78)
724672 2008-12-01 20:15:00 No they dont usually from what Ive seen on Acer / HP / Asus machines... that said Ive never looked terribly hard to try and find them, but still... ;) Chilling_Silence (9)
724673 2008-12-01 20:23:00 Hmm ok this is a Emachines AMD system.

I'll check the specs once he/she comes back online.

I downloaded SP3 for it last night (Its got XP Home on it).

I did a check with the VB script, (thats checks if its affected / checks the Intelppm entry in the registry, it was fine).

It was disabled. This was confirmed, when jbmcgee did get back into XP, after SP3 had finished installing

I dont know where (or how) trojan remover picked autorun.inf up.

It wasnt from the partition itself. (I didnt scan the partition itself).

It was calling it (autorun.inf), from somewhere in the registry
Speedy Gonzales (78)
724674 2008-12-01 20:59:00 Speedy, auto.inf is the virus which caused me so much
hassle for the past few weeks. It hijacked my PC and
messed up IE7, Backup/Restore and all updates. Thanks to
your support, I have returned all to normal by following your
instructions re HJT log and by deleting a corrupt reg file which
contained no User Value (Vista) You have to blow the bastard
to Kingdom Come - Get Rid Of It !
If you Google auto.inf you will see how many people worldwide
are in trouble because of it and some advice.
blanco (11336)
724675 2008-12-01 21:05:00 Yup thats what I was thinking.

BUT since its in a recovery partition (which I cant open right now, it wont let me)!

I cant see whats in it, and if I remove it and info.exe using trojan remover.

If this person uses it (to make a cd / dvd, it may not work)
Speedy Gonzales (78)
724676 2008-12-01 21:29:00 Why can you not open the the recovery partition - probably D ?
Normally, you could explore this. Have you been to regedit and
looked at what's contained ?
blanco (11336)
1 2