USB malware - very interesting prevention tool

[aigle]

I tried this tiny software and I am really impressed. It,s cleverly coded and I will recommend to install it on any PC. Once you install it, there should not be any fear of USB autorun viruses.

http://sourceforge.net/projects/noautorun/

[Kees1958]

Okay replacing Panda USB now, becasuse you are so positive about it

[Meriadoc]

Ah so this does more than a block autorun globally/Panda usb 'tweak' and does (?) to autorun files.

edit : (reading the help) seems somehow it determines whether executables are suspicious then locks them leaving the user to decide what to do with them.

[arjunned]

No x64 version.. :(

[TOMxEU]

You can still use NTFS permissions to deny writing to root of the flash drive and it works on any PC, though it might be a little uncomfortable.

[tsilo]

-{ Quote: "No x64 version.. :(" }-
I have installed it in my W7 X64, works great



I sad about this tool several times in many threads, it's very useful. Especially I like ability to safelly reopen autorun disabled folder, I use U3 lunchpad and in this case No Autorun helps me alot. I recommend to integrate this tool to every AV program developers.
This small software guaranties 100% user will not harmed by USB viruses.

[adik1337]

thanks .. this is a very handy security app ... very light on resurces as well

[arjunned]

There is? I thought i saw only a x86 version at the site? Will try again now.

Edit: I thought the download was only for x86. Thanks again. Downloaded and working now. :thumb:

[jmonge]

i use this:;D

Click Start, click Run, type regedit in the Open box, and then click OK.
Locate and then click the following entry in the registry:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoDriveTypeAutorun
Right-click NoDriveTypeAutoRun, and then click Modify.
In the Value data box, type 0xFF to disable all types of drives. Or, to selectively disable specific drives, use a different value as described in the "How to selectively disable specific Autorun features" section.
Click OK, and then exit Registry Editor.
Restart the computer.;D :thumb: :thumb:

[tsilo]

-{ Quote: "i use this:;D

Click Start, click Run, type regedit in the Open box, and then click OK.
Locate and then click the following entry in the registry:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoDriveTypeAutorun
Right-click NoDriveTypeAutoRun, and then click Modify.
In the Value data box, type 0xFF to disable all types of drives. Or, to selectively disable specific drives, use a different value as described in the "How to selectively disable specific Autorun features" section.
Click OK, and then exit Registry Editor.
Restart the computer.;D :thumb: :thumb:" }-

Try this tool and you will notice it's way effective than your registry tweak :)
This tool not only disables autorun, it safely opens USB folder. It does it even on Windows 7, where autorun is disabled by default ;)

[ruinebabine]

What is supposed to accomplish its "USB Disk Soft Write Protect" feature? No change that I can see when I enable this.
Does it also work for external usb hard-drives?
Is there some documentation available somewhere?

[sg09]

I am using this...:)

[sg09]

-{ Quote: "What is supposed to accomplish its "USB Disk Soft Write Protect" feature? No change that I can see when I enable this.
Does it also work for external usb hard-drives?
Is there some documentation available somewhere?" }-
It will make the USB Drive write protect so that, no files can be copied to it.
For help
http://sourceforge.net/projects/noautorun/forums/forum/1015421

[ruinebabine]

-{ Quote: "It will make the USB Drive write protect so that, no files can be copied to it.
For help
http://sourceforge.net/projects/noautorun/forums/forum/1015421" }-
Thanks. I see that this feature works on newly connected (or reconnected) usb drive, not on them already connected before program's start.
Yes it seems to be a nice and light puppy and a keeper.

[tsilo]

No Autorun 1.1.0.13 Released! ;D
Here's link:http://www.softpedia.com/get/Antivirus/No-Autorun.shtml

[aigle]

-{ Quote: "I recommend to integrate this tool to every AV program developers.
" }-
Sure. :thumb:

[sg09]

Is there any AV that integrates such tool except Panda?

[tsilo]

I think it's better than Panda USB Vaccination.

[HAN]

For this app to work properly, it needs to runs all the time in the background, right?? If so, sorry but not interested, no matter how tiny it is. The Panda tool can permanently prevent autorun passively if one installs it that way (which I do.)

Based on it's core purpose, how does No Autorun prevent USB autorun any better than the Panda tool?

[Franklin]

Below is a batfile to create an autorun.inf in the root of each drive that can't be overwritten and hard to delete but Unlocker can get rid of it.

It needs to be run manually in each drive where needed.

It will also rename any existing autorun.inf to autorun.bak.
REM Remove attributes for autorun.inf file
attrib -R -A -S -H autorun.inf
REM
REM Make a backup of autorun.inf called autorun.bak
ren autorun.inf autorun.bak
REM
REM Make autorun.bak file read-only and hidden
attrib +R +H autorun.bak
REM
REM Create autorun.inf directory
mkdir autorun.inf
REM
REM Create subdirectory .\con\
cd autorun.inf
mkdir .\con\
REM
REM Change directory back to root of USB key
cd ..
REM
REM Hide autorun.inf directory
attrib +H autorun.inf

[sg09]

But on startup , the main window opens. Is there any way to stop this?

[tsilo]

-{ Quote: "But on startup , the main window opens. Is there any way to stop this?" }-

Go to Config and there u can find "Hide main window on startup".

[sg09]

-{ Quote: "Go to Config and there u can find "Hide main window on startup"." }-
Thank you.

[Lebowsky]

1.1.0.14a is the latest version.

[Lebowsky]

-{ Quote: "It will make the USB Drive write protect so that, no files can be copied to it.
For help
http://sourceforge.net/projects/noautorun/forums/forum/1015421" }-
I wish this is more clearly explained.
Does this mean that if i install this program, then if i insert a clean usb into an infected machine, no autorun virus will be able to automatically infect my usb drive?

[tsilo]

-{ Quote: "I wish this is more clearly explained.
Does this mean that if i install this program, then if i insert a clean usb into an infected machine, no autorun virus will be able to automatically infect my usb drive?" }-

Yes, it means that :)
But first of all it's prevention tool.

[Lebowsky]

-{ Quote: "Yes, it means that :)
But first of all it's prevention tool." }-
Thanks for the reply.
Can someone take a look at these posts:

http://www.wilderssecurity.com/showpost.php?p=1670094&postcount=53
http://www.wilderssecurity.com/showpost.php?p=1670114&postcount=55
http://www.wilderssecurity.com/showpost.php?p=1670131&postcount=57
http://www.wilderssecurity.com/showpost.php?p=1666109&postcount=27
http://www.wilderssecurity.com/showpost.php?p=1670071&postcount=50

I am confused. Security experts?! A little Help!

[tsilo]

-{ Quote: "Thanks for the reply.
Can someone take a look at these posts:

http://www.wilderssecurity.com/showpost.php?p=1670094&postcount=53
http://www.wilderssecurity.com/showpost.php?p=1670114&postcount=55
http://www.wilderssecurity.com/showpost.php?p=1670131&postcount=57
http://www.wilderssecurity.com/showpost.php?p=1666109&postcount=27
http://www.wilderssecurity.com/showpost.php?p=1670071&postcount=50

I am confused. Security experts?! A little Help!" }-

These posts is about other software..

[tsilo]

If you really want to understand how this tool works you can post your questions here (http://sourceforge.net/projects/noautorun/forums) to author.

[stackz]

-{ Quote: "I wish this is more clearly explained.
Does this mean that if i install this program, then if i insert a clean usb into an infected machine, no autorun virus will be able to automatically infect my usb drive?" }-
This software only protects the computer that it is installed on. If you insert a usb drive into an infected machine that has an autorun virus, it can infect your usb drive - but when you plug the drive back into your own pc, the autorun is disabled, so your own pc won't be infected. It does this via the WM_DEVICECHANGE message.

[sg09]

-{ Quote: "If you really want to understand how this tool works you can post your questions here (http://sourceforge.net/projects/noautorun/forums) to author." }-
Also you can mail the author. He is also on Twitter (https://twitter.com/CTQY).

218705

[tebbens]

I just ran into a virus on my USB Flash Drive...

Why are the features in this tool not options included in NOD32 ??
Seems like a very good idea to include in NOD32 !?

[jmonge]

it is included in nod32 actually if you dig a litle you will find it;) use advance settings