Thursday, 28 January 2016

Remove the Panda vaccine protection from the \AUTORUN.INF file (FAT+NTFS)

I have written a small grub4dos batch file (AntiPanda.g4b) which will attempt to fix both FAT and NTFS volumes (hd0,0) and (hd0,1).

NEWSFLASH: New version (that works!) in E2B v1.77g or later!

To use it, copy the .mnu file to the \_ISO\MAINMENU folder and the AntiPanda.g4b file to the \_ISO\e2b\grub folder.

I will add this into the next version of E2B so that you can just copy the .mnu file from the Sample mnu folders file to one of your menu folders (e.g. \_ISO\UTILITIES).

I have not fully tested this on NTFS volumes because Panda Vaccine USB is unable to actually work on most of the NTFS volumes I have!

If you have an \AUTORUN_.INF file (with an underscore) then you may need to rename this to \AUTORUN.INF and run the fix before the drive icon will be restored. If you cannot rename the AUTORUN_.INF file, then just delete it.

E2B v1.77f (Beta) is now available and includes these new files. The next version will include a .mnu file and new version of the AntiPanda.g4b that allows you to pick any partition in the system (in case you want to un-Panda any internal drives or additional USB drives).

P.S. This won't work if you run it on a VM unless use either RMPrepUSB - F11 QEMU  or  VirtualBox+VMUB, because these allow full rd/wr access.