January 23, 2009

How to effectively disable Autorun and Autoplay features in Windows (Vista / XP) ?

Now a days viruses/worms uses Windows "Autorun" feature/flaw to execute and infect a computer while connecting a removable storage device. Microsoft and other major Anti-Virus makers recommends to disable AutoRun on Microsoft Windows systems can help prevent the propagation of malicious code.

How to effectively disable Autorun and Autoplay features in Windows (Vista / XP) ?


According to US-Cert : National Cyber Alert System Windows disabling AutoRun and AutoPlay by changing Group policy (gpedit.msc) are not fully effective . US-CERT recommends the following method to disable AutoRun .

Copy the registry values shown below and save it with '.reg' extension. For eg: "disableautorun.reg" .
Save it with '.reg' extension


REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]
@="@SYS:DoesNotExist"


Save it with '.reg' extension using Notepad
Double-click the file to import it into the Windows registry and restart Windows . Now Windows will ignore Autorun.inf file in removable storage devices.

Related:
1. How to remove "autorun.inf" from USB Drive ?
2. Remove "Autorun.inf" and "Antivirus 2008" using ESET NOD32 Antivirus
3. Virus/Trojan Removal Tips And Tools: mywork.exe, msvcrt.ax, igfxtray.exe, Autorun.inf, auto2.pif

Source: US-Cert.

No comments: