Avira - Guard "Autorun blocked"

sleepystar1975

Hi there

I am hoping someone can offer me some advice on what to do about this message that comes up on Dh's laptop. Any help would need to be aimed at luddite level though, as I am not great with computers.

I usually use the main computer, but since I had major ankle surgery, I use my husbands laptop while I am resting.
He uses "Avira" as his anti-virus, and once a week, one of us will set the "luke filewalker" going while we take the dogs for their big walk. It's never found anything on any parts of the computer.
For a while now, a pop up box comes from the bottom right of the screen, with a bleep, the box says

Guard: Autorun blocked
Date/Time: **/**/2010 **.**.**
Type: Autorun blocked

Access to the file 'F:\Autorun.inf' was blocked for your security.

Additional information on this is available in the help

The help section on Avira doesn't say anything, and I've tried scanning just drive F (which looks like it's a sub-section of the hard drive where Dh has stored the HP recovery stuff, but I could be wrong, on "My computer" it shows drive F as "HP_RECOVERY (F:) which is where I get my assumption from)
I asked the help of a workfriend, who suggested downloading Malwarebytes, but again, that shows nothing on total scans, or scans of the F section.
As I've typed this message, I did another Avira scan on the F section, just to be sure, but it still found nothing.

Can anyone shed any light on what this Autorun is about, and if it needs to be "got rid of", how would I go about it please.

Thanks in advance.


editted to add.
in case this info helps.
the laptop is a hp compaq 6720s
running Vista (not by his choice - it came pre-loaded)
internet is explorer - not sure of version (7 or 8)

dogmaryxx

Open Avira -> Configuration -> Guard -> Scan -> Action on detection and disable "Block autostart function".

The_Grandmaster

Interesting to see I'm not the only one who had this. Must be a bug in the programme and it probably isn't an infection (on my computer anyway). I hope avira knows about this problem.

And dogymarxx's method will stop the messages.

sleepystar1975

Thanks dogmaryxx.

Can you reassure me that this is the right thing to do, as I am put off by the bit which says "This functionality however carries with it a high security risk, as malware and unwanted programmes can be installed with the automatic start"

This pop-up occurs at random times of computer use, I am not trying to play a CD or use a memory stick or anything else at the time. Last time it happened, I was browsing this forum, with no other tabs open.

The_Grandmaster

Exactly the same thing happened to me sleepystar1975.

I did the same thing dogymarx mentioned and the pop ups have stopped. I checked my computer for infections with avira and malwarebytes and nothing has been found so seems ok.

Do you run malwarebytes too? If not, it is advisable - unless you run another malware programme? Install malwarebytes if not. Download Malwarebytes Anti-Malware 1.46 - FileHippo.com go to the UPDATE tab, CHECK FOR UPDATE and do a QUICK SCAN. Remove anything it finds (if it does) and post log here. Then while waiting, UPDATE definitions and run a FULL SCAN. Hopefully nothing will be detected.

sleepystar1975

The_Grandmaster wrote: »

Exactly the same thing happened to me sleepystar1975.

I did the same thing dogymarx mentioned and the pop ups have stopped. I checked my computer for infections with avira and malwarebytes and nothing has been found so seems ok.

Do you run malwarebytes too? If not, it is advisable - unless you run another malware programme? Install malwarebytes if not. Download Malwarebytes Anti-Malware 1.46 - FileHippo.com go to the UPDATE tab, CHECK FOR UPDATE and do a QUICK SCAN. Remove anything it finds (if it does) and post log here. Then while waiting, UPDATE definitions and run a FULL SCAN. Hopefully nothing will be detected.

Thanks, yes, I have the malwarebytes hippo thing too (why Hippo? love it, but wonder why the name), I ran that on a full scan last night, and it found nothing too. But I will certainly run another, I'll post back with any findings.

The_Grandmaster

Filehippo.com is just a site with lots of softwares uploaded onto it.

Malwarebytes is technically a separate programme to the site.

Think your computer is fine if you have updated your defintions and the scans show nothing. Just remember to run malwarebytes scan regularly too.

spud17

It's a security feature as shown in dogmaryxxs post #2. It stops e.g.flash drives running automatically, and possibly installing nasties before you see what is on the drive.

I use Avira, and don't have a problem with the notification reminding me that the autostart is disabled.