topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • Tuesday March 19, 2024, 6:05 am
  • Proudly celebrating 15+ years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Author Topic: Another good MakeUseOf.com article: Stop USB Drives from running apps on insert  (Read 9379 times)

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,896
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
MakeUsOf.com continues to impress, with a consistent stream of useful and non-trivial howto articles for pc users.

USB flash drives are our personal data carriers, but the way we use it to exchange files also makes them open to viruses.

The Achilles heel which viruses exploit is the autorun.inf file. Autorun.inf file is a simple instruction file present in removable media like CDs, DVDs and USB drives.

...

We have to find ways to short circuit the automatic execution of programs (good or bad), so that a hidden malware does not penetrate our system.


MilesAhead

  • Supporting Member
  • Joined in 2009
  • **
  • Posts: 7,736
    • View Profile
    • Donate to Member
That's an interesting article.  I haven't tried it myself but I wonder if it would be effective to have an empty autorun.inf marked read-only and owned by the Administrative(the real one) account?  Seems like a method that's actually on the USB key would be the best? Although I don't know enough about the file system to figure out if it can mark ownership that way(assuming you'd be plugging the thing into various Windows machines here and there.)

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,896
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
i think if you have complete control over the usb drive you probably don't care much about this..

the real problem is if you ever have reason to plug *someone elses* usb drive into your pc.  that's where understanding how to prevent autorun from triggering is so damn important.

[probably one of the few scenarios described by cyberwarfare people that actually represents a real risk is the very low-tech approach of planting a virus on a usb stick along with some pictures and "losing" the usb thumbdrive somewhere on the premises of the place you want to break into.. curiousity gets the better of people who should no better, they plug in the drive to see what's on it, and it's game over]

nite_monkey

  • Member
  • Joined in 2006
  • **
  • Posts: 753
    • View Profile
    • Just Plain Super
    • Read more about this member.
    • Donate to Member
Luckily for me, my computer hates autorun, and it won't auto start anything I plug in whether it is a cd, or a usb device. Not sure what I did to make it do that either.
[Insert really cool signature here]

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,896
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
autorun is evil and dangerous.
my view is that no one with the technical skills to read this forum should have it enabled; if you do, time to learn how to disable it.

MilesAhead

  • Supporting Member
  • Joined in 2009
  • **
  • Posts: 7,736
    • View Profile
    • Donate to Member
I thought the idea was a virus would put some autorun nasty on your USB key while it was plugged in.  Then the next time you insert it, whammo!!  Like, some people leave the thing in for that ReadyBoost or RamBoost or whatever that Vista thing is that uses USB for performance enhancement.

And yeah, I usually turn off the the autostart stuff.  Although in W7 I haven't bothered because it pops up a prompt rather than going ahead and doing anything. I've been closing the dialog.  Of course that's my secondary PC so I don't use it that much anyway.  Surfing unknown sites with Sandboxie on mainly.. and testing my apps.

lanux128

  • Global Moderator
  • Joined in 2005
  • *****
  • Posts: 6,277
    • View Profile
    • Donate to Member
USBDLM has been mentioned several times in the forums and it is quite a comprehensive tool when it comes to thumb drives. regarding autorun, users can specify several criteria to control autorun events such as drive model, serial no, etc.

http://www.uwe-siebe...usbdlm430_help_e.htm