Frequently Asked Questions
This is the online version of the Frequently Asked Questions(FAQ) pertaining to Autorun Eater. If you have downloaded Autorun Eater, it is already included in the help file.
This list will be updated from time to time. You can add a question to any of the replies section. New questions will be added to the help file and available for download monthly, if possible.
- How does Autorun Eater determine which ‘autorun.inf’ file is suspicious?
- How would I know if a suspicious ‘autorun.inf’ file is detected?
- Why are there random numbers in the detection window title? Is it a bug?
- How do I remove a suspicious ‘autorun.inf’ file?
- How does the ‘Close Autoplay’ function protect me from executing the malware?
- What does the ‘Ignore’ option do in the detection window?
- I have chosen to remove the suspicious ‘autorun.inf’ file but another warning appears straight away for the same file and drive! Why is this happening?
- I have accidentally ignored a suspicious ‘autorun.inf’ file! How do I undo it?
- Are drives A: and B: monitored as well?
- What happens to the ‘autorun.inf’ file when it is removed?
- Where can I check the removal results?
- Why are there 2 suspicious file results in the ‘Suspicious Autorun.inf Detected’ warning message box?
- I’m confused, what is the difference between ’suspicious autorun.inf files’ and ’suspicious files’?
- Will there be a conflict between Autorun Eater and my anti-virus/anti-spyware application(s)?
- Why is my anti-virus application detecting Autorun Eater as a malware?
- Is Autorun Eater compatible on all operating systems?
- What does ‘Registry Fix do’?
- Why are some of the menu options ‘greyed-out’ when I start Autorun Eater, is this a bug?
- Is it possible to pause Autorun Eater?
- Why can’t I remove my removable storage device when Autorun Eater is started?
- Does it make a difference to change the ‘Scan Priority?
- Can I make Autorun Eater launch and scan automatically everytime I start my computer?
- The ‘goat’ sound is annoying! How do I mute it or change it to something else that sounds better?
- How do I uninstall Autorun Eater?
- Why are there leftover files and folders after uninstalling?
1. How does Autorun Eater determine which ‘autorun.inf’ file is suspicious?
Autorun Eater determines whether an ‘autorun.inf’ file is malicious or not by checking for certain strings in the file. You are then warned and asked for further action if ‘autorun.inf’ files containing those strings are detected. This also applies if the ‘autorun.inf’ has not been previously ignored
2. How would I know if a suspicious ‘autorun.inf’ file is detected?
Autorun Eater monitors all drives(except drives A:, B: & CD/DVD drives) in real-time. When a suspicious ‘autorun.inf’ file is detected in any of those drives, a detection window immediately appears to warn and ask you for further action. Plugging an infected removable storage device(eg. pendrive), also activates the detection window.
3. Why are random numbers used for the detection window title? Is it a bug?
No, it isn’t a bug. It is a measure used to prevent malwares from attempting to close the window.
4. How do I remove a suspicious ‘autorun.inf’ file?
It depends on your Autorun Eater’s ‘Removal Settings’. If it is set to ‘Ask For Confirmation’, then there are options to either ‘Ignore’ it or ‘Remove’ it. If it is set to ‘Auto-Remove’, then the suspicious ‘autorun.inf’ file is automatically removed. Suspicious ‘autorun.inf’ files are auto-backup’ed before they are removed.
5. How does the ‘Close Autoplay’ function protect me from executing the malware?
Certain ‘autorun.inf’ files contain instructions that attempt to trick you into executing the malware file via the AutoPlay window. When this is enabled and Autorun Eater detects such an instruction, the window is closed to prevent execution of malware.
6. What does the ‘Ignore’ option do in the detection window?
If Autorun Eater detects a your legitimate ‘autorun.inf’ file as suspicious, you can used this option to ignore it. You will not be warned again about it, unless you use the ‘Remove Ignore’ option in the tray menu.
7. I have chosen to remove the suspicious ‘autorun.inf’ file but another warning appears straight away for the same file and drive! Why is this happening?
A malware is probably still running in the computer and it is recreating the suspicious ‘autorun.inf’ file. You can choose to ignore the file(not recommended) or you can exit Autorun Eater(recommended) and then close the detection window(use the ‘X’ button).
Update your antivirus and perform a full system scan to detect and remove any malware. After that, start Autorun Eater again, and see if the above problem recurs. If it does, your antivirus probably did not remove the malware. If possible, send the malware sample to your vendor for them to add it to their malware detection list.
8. I have accidentally ignored a suspicious ‘autorun.inf’ file! How do I undo it?
You can undo it by using the ‘Remove Ignore’ option in the tray menu.
9. Are drives A: and B: monitored as well?
No, drives A: and B: must be manually scanned using the options available in the tray menu.
10. What happens to the ‘autorun.inf’ file when it is removed?
A backup copy of the suspicious ‘autorun.inf’ file is first made, and then the original copy is deleted.
Backup copies of the removed ‘autorun.inf’ file(s) can be viewed by clicking on ‘View Backup’ under the ‘Autorun Backup’ menu option or you could manually navigate here:
Documents and Settings\All Users\Application Data\Autorun Eater\Autorun Backup
11. Where can I check the removal results?
You can check the log file by clicking on ‘View Log’ under the ‘Results Log’ menu option.
12. Why are there 2 suspicious file results in the ‘Suspicious Autorun.Inf Detected’ warning message box?
Autorun Eater’s monitoring engine has a 2 level scanning system to make sure any suspicious files are detected and to determine if they are present in the drive. Normally 1 result is sufficient to determine if suspicious files are present.
13. I’m confused, what is the difference between ’suspicious autorun.inf files’ and ’suspicious files’?
‘Suspicious autorun.inf’ files refers to ‘autorun.inf’ files only, wherelse ’suspicious files’ are the files that the ‘autorun.inf’ file attempt to execute when the drive is accessed.
14. Will there be a conflict between Autorun Eater and my anti-virus/anti-spyware application(s)?
Well, that depends, but so far we have not come across such problems, yet.
15. Why is my anti-virus application detecting Autorun Eater as a malware?
It is what you call a false positive detection due to certain codes in the application that may have been used by malwares but be rest assured that Autorun Eater does NOT contain any malwares or spywares. If problem persists, please contact your respective anti-virus vendor.
16. Is Autorun Eater compatible on all operating systems?
Autorun Eater is probably compatible on all versions of Window but not on Mac, Linux, Unix or any other operating systems. Sorry guys.
17. What does ‘Registry Fix do’?
Many at times, malwares will disable certain important functions like the Task Manager, Regedit and Folder Options. You can click on any of the 3 fixes to fix the related functions.
18. Why are some of the menu options ‘greyed-out’ when I start Autorun Eater, is this a bug?
No, it isn’t a bug. Unless certain conditions are met(presence of files/folders, registry keys), these options will be ‘greyed-out’.
19. Is it possible to pause Autorun Eater?
Yes it’s possible. A black colour transparent-looking bar will slide in from the bottom-right side of your screen when the ‘Unpause/Pause’ tray menu option is clicked or when your keyboard’s ‘Pause’ key is pressed. You can unpause by repeating the steps mentioned. No files will be detected when it is paused.
20. Why can’t I remove my removable storage device when Autorun Eater is started?
A harmless ‘autorun.inf’ file(probably made by you) may be present in your removable storage device. You have to pause or stop Autorun Eater before you can safely remove your removable storage device.
21. Does it make a difference to change the ‘Priority?
It changes Autorun Eater’s monitoring speed but it wouldn’t really make a difference apart from using up more memory and probably detecting suspicious files earlier but it’ll be better to stick to the default priority(Normal).
22. Can I make Autorun Eater launch and monitor automatically everytime I start my computer?
Yes you can. This can be done by clicking on the ‘Add Billy To System Startup’ option in the tray menu. You can also prevent it from launching automatically by clicking on ‘Remove Billy From System Startup’.
23. The ‘goat’ sound is annoying! How do I mute it or change it to something else that sounds better?
Yes, you can choose to on or off the sound using the ‘Startup/Exit Sound’ option in the tray menu. To change the sound, you can grab any of of your favourite ‘.wav’ files, rename it to ’sound.wav’ and replace the original ’sound.wav’ file in the installation folder.
24. How do I uninstall Autorun Eater?
You can either click ‘Uninstall Autorun Eater’ under the ‘Start’ menu list or from the ‘Add/Remove Programs’ list under ‘Control Panel’.
25. Why are there leftover files and folders after uninstalling?
Those are the backup files and logs that were created during the usage of Autorun Eater. They are retained for your reference and can be safely deleted at any time.
June 2nd, 2009
