How can I stop particular apps from "autorunning"

Discussion in 'other security issues & news' started by brjoon1021, Oct 11, 2010.

Thread Status:
Not open for further replies.
  1. brjoon1021

    brjoon1021 Registered Member

    Joined:
    Aug 10, 2005
    Posts:
    143
    Win XP all service packs.

    My question is how can I block autorun apps from starting ? These are 3rd party apps, not windows native apps. Don't worry about what apps I am talking about or how they get triggered, just that I want three programs to never run without asking me first.

    I am looking for a VERY low resource way of doing this. I know that I can install something like Spyware Terminator, turn on the HIPS and all of that, all just to tell it to never let these programs run, but I am hoping that there is a more streamlined way.

    Thanks,

    b
     
  2. Sully

    Sully Registered Member

    Joined:
    Dec 23, 2005
    Posts:
    3,719
  3. brjoon1021

    brjoon1021 Registered Member

    Joined:
    Aug 10, 2005
    Posts:
    143
    maybe some more detail is in order from me.

    I upload xrays as part of my job. The Xrays are copied to a CD. When the CD is inserted, a proprietary, incredibly slow, poorly writtent, resource hungry, crappy, application autostarts and nearly locks my laptop up for a full minute - just to display the xrays that I do not need to see.

    I just want to be able to insert the CD, then explore the CD drive, while keeping their display application (a .exe) from running. There are three different xray equipment vendors. I have to be able to kill the display application for all three.

    Thanks
     
  4. Rmus

    Rmus Exploit Analyst

    Joined:
    Mar 16, 2005
    Posts:
    4,020
    Location:
    California
    It sounds like the Xray is some type of image that is being read by AutoPlay which starts the default application to display that image. How else can something run automatically from a CD?

    Try holding down the left SHIFT key as you insert the CD and see if that stops the "autorunning."

    If so, you can disable AutoPlay by r-clicking on your CD rom drive, going to the AutoPlay tab and checking appropriate boxes.

    Another very easy way is to install the Microsoft PowerToy, TweakUI for XP.

    If this is indeed the problem, and if you are interested, I'll look for a URL (or you can search)

    ----
    rich
     
  5. Sully

    Sully Registered Member

    Joined:
    Dec 23, 2005
    Posts:
    3,719
    If the .exe name is always the same, you could make a few SRP rules to deny those executables from any drive, unless they use autorun.inf to get started, in which case you should do what Rmus is referring to.

    Sul.

    Edit: I see you can find the name of the .exe each vendor uses it seems. An SRP rule would do the trick I should think.
     
  6. brjoon1021

    brjoon1021 Registered Member

    Joined:
    Aug 10, 2005
    Posts:
    143
    I will try these tips.

    thanks.
     
  7. Rmus

    Rmus Exploit Analyst

    Joined:
    Mar 16, 2005
    Posts:
    4,020
    Location:
    California
    It's more likely AutoPlay -- I don't see how an autorun.inf file configured to run that application, would get onto a blank CD.


    ----
    rich
     
  8. Sully

    Sully Registered Member

    Joined:
    Dec 23, 2005
    Posts:
    3,719
    True, but my thought was if the 'proprietary' executable exists, something is not just 'burn to cd'. The OP does not state details, like is he including the .exe if he is creating the discs. Or, is he only recieving the discs and then doing something with them. How is the .exe even getting on the cd, and if it comes like that, is a proprietary software creating the cd? In this case, maybe there is an autorun.inf. Not enough infos to know for sure.

    Sul.
     
  9. Rmus

    Rmus Exploit Analyst

    Joined:
    Mar 16, 2005
    Posts:
    4,020
    Location:
    California
    OK. We'll just have to wait and see!

    ----
    rich
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.