HIPS detects autorun.inf wants to 'run'

[AaLF]

My HIPS alerts me that a flash drive has a 'thing' called autorun.inf embedded and often tries to activate. How does one go about removing it? NB KIS 2013 never spots it.

 

[Borg 386]

You can "immunize" your USB drive with this program.

USB Immunizer | BitDefender Labs

For years, Autorun-based malware has been atop of the worldwide e-threat landscape, with notorious representatives such as Trojan.AutorunInf, the Conficker worm (Win32.Worm.Downadup) or Worm.Autorun.VHD.​

Introduced back in the Windows XP era to facilitate software installations from CD-ROM media for non-technical computer users, the Autorun feature has rapidly become the infection vector of choice for cyber-criminals.​

The USB immunizer is BitDefender's response to this growing issue.​

It disables autorun-related threats before they access the computer. Once installed, it constantly watches for newly inserted USB storage devices and immunizes them on the fly. If you accidentally plug in an infected USB drive that has not been immunized, the computer will not auto-execute the piece of malware located on the USB storage device.​

It also wouldn't hurt to scan the drive with an AV to make sure you didn't pick up anything from another PC.

 

[DBone]

AaLF, the warning you're receiving from AppGuard is because it blocks the autorun in your USB device when plugged in. It is what AG does, and you can ignore the warning from AG, as it's working as designed.

 

[AaLF]

Thanks 4 the replies, fellas. That USB immunizer is only a blocker like AppGuard. I was hoping to delete it. I don't think its harmful, just a pest. AVG & KIS 2013 nor EAM7 give it a 2nd glance.