One quick trick prevents AutoRun attacks

[mgh]

Came across this article
One quick trick prevents AutoRun attacks (http://windowssecrets.com/2007/11/08/02-One-quick-trick-prevents-AutoRun-attacks)
while looking for ways to remove a trojan transferred from a friend's pen drive to my pc . The trojan was simple to remove after booting in safe mode.
The registry entry suggested in the article for blocking autorun.inf put by the virus/trojan on pen drives, should work afaik.

Waiting for comments by people familiar with windows registry.

[Shinigami-Sama]

or do like every sane person and just turn off autorun

[jeffy]

or do like every sane person and just turn off autorun

Doesn't help, read carefully, just a single double-click is the trap, or the previously accessed removable drives...

More in the article and here:
http://nick.brown.free.fr/blog/2007/10/memory-stick-worms

And thirdly, a little-known registry key called MountPoints2 contains cached information about every memory stick or other removable device which your PC has ever seen, and that overrides the NoDriveTypeAutoRun value if you insert a volume which the PC already knows about.


:thanks: mgh!

[Shinigami-Sama]

this is why you turn autorun off at the install disc level
thought I did forget it autoplays by default...

[DigitAl56K]

Auto-run is the worst "feature" of windows, period.

Worse than just putting your system at risk, the kind of people autorun was presumably designed to help are the same group of people most at risk from such things.

[setarip_old]

The simplest, most certain "do-it-each-time-you-insert-media" method is to hold down the shift key throughout the loading of the media...