Panda USB and AutoRun Vaccine

Discussion in 'other anti-virus software' started by chachazz, Mar 5, 2009.

Thread Status:
Not open for further replies.
  1. chachazz

    chachazz Updates Team

    Joined:
    Apr 23, 2004
    Posts:
    840
    Computer Vaccination
    The free Panda USB Vaccine allows users to vaccinate their PCs in order to disable AutoRun completely so that no program from any USB/CD/DVD drive (regardless of whether they have been previously vaccinated or not) can auto-execute. This is a really helpful feature as there is no user friendly and easy way of completely disabling AutoRun on a Windows PC.

    USB Vaccination
    The free Panda USB Vaccine can be used on individual USB drives to disable its AUTORUN.INF file in order to prevent malware infections from spreading automatically. When applied on a USB drive, the vaccine permanently blocks an innocuous AUTORUN.INF file, preventing it from being read, created, deleted or modified. Once applied it effectivelly disables Windows from automatically executing any malicious file that might be stored in that particular USB drive. The drive can otherwise be used normally and files (even malware) copied to/from it, but they will be prevented from opening automatically. Panda USB Vaccine currently only works on FAT & FAT32 USB drives. Also keep in mind that USB drives that have been vaccinated cannot be reversed.
    • Panda USB Vaccine is a 100% free utility.
    • With Command line Operation.
    • Tested under Windows 2000 SP4, Windows XP SP1-SP3, and Windows Vista SP0 and SP1
    Download @ Panda Research
     

    Attached Files:

  2. renegade08

    renegade08 Registered Member

    Joined:
    Aug 26, 2008
    Posts:
    431
    Last edited: Mar 6, 2009
  3. renegade08

    renegade08 Registered Member

    Joined:
    Aug 26, 2008
    Posts:
    431
    Autorun infections re-emerging in the wild



    Story
     
  4. raven211

    raven211 Registered Member

    Joined:
    May 4, 2005
    Posts:
    2,567
    Good post, seems like a great utility.
     
  5. vijayind

    vijayind Registered Member

    Joined:
    Aug 9, 2008
    Posts:
    1,413
    From what I understand, Panda Autorun Vaccine only works for USB drives by eliminating the threat of malware loading via autorun.inf.

    So the same is not applicable to DVD Drives. Windows has option to disable CD/DVD autoplay.
    For XP, see this article:
    http://www.wikihow.com/Disable-CD-and-DVD-Autorun-in-Windows-XP
     
  6. Niels

    Niels Registered Member

    Joined:
    Jul 29, 2005
    Posts:
    466
    Location:
    Belgium
    Hello renegade08,

    Are you speaking about a movie on dvd? Panda USB will only block programs.
    You should test it with software that you know will use autorun to start installation.

    Kind regards,
    Niels

    To bad that it doesn't work on NTFS external hard disks. You can always use Flashdisinfector to disable autorun.
     
  7. Saraceno

    Saraceno Registered Member

    Joined:
    Mar 24, 2008
    Posts:
    2,404
    NTFS will be ready shortly, see comments:

    Nice find, handy tool.
     
  8. vijayind

    vijayind Registered Member

    Joined:
    Aug 9, 2008
    Posts:
    1,413
    Hmm... I may be wrong. But won't the method described below work for all drives ( USB/CD/DVD/FAT/NTFS/etc..)
    http://www.wikihow.com/Disable-CD-and-DVD-Autorun-in-Windows-XP

    Using MS Powertoys, it seems you can disable autorun on specific drives as well as all removable and CD/DVD drives. By doing so you achieve complete autorun protection ( in a way).
     
  9. Saraceno

    Saraceno Registered Member

    Joined:
    Mar 24, 2008
    Posts:
    2,404
    Doesn't the panda tool stop the USB autorun on all computers, that is, limiting it's autorun file? Reading the notes, once applied to a USB, it can't be reversed.

    Whereas the microsoft tool is for each system the powertoys program is installed?
     
  10. vijayind

    vijayind Registered Member

    Joined:
    Aug 9, 2008
    Posts:
    1,413
    Saraceno, right you are. :thumb:

    So Panda is holistic from the USB drive perspective, while MS Powertoys seems better from the whole PC perspective.

    Choose one or both as best for you ...
     
  11. renegade08

    renegade08 Registered Member

    Joined:
    Aug 26, 2008
    Posts:
    431
    Well i thinked the same about it but i have read this



    I can see CD/DVD drive mentioned here, or it's some typo or marketing trick ?

    Thanks about the article .


    Edit: Maybe i didn't read or understood(i'm probably just stupid) the article correctly. So probably is my mistake.

    It's like for downloading the paid version of Rising.

    The download is "free", but you have to pay for using the program.
     
    Last edited: Mar 7, 2009
  12. renegade08

    renegade08 Registered Member

    Joined:
    Aug 26, 2008
    Posts:
    431

    Hi Niels,

    I was reffering to normal DVD which was burned by me, and it has programs, pictures and simillar stuff on it.
     
  13. romance520

    romance520 Registered Member

    Joined:
    Nov 5, 2008
    Posts:
    21
    :eek:

    Oh,MG...

    My USB's format is NTFS...

    So Panda USB and AutoRun VAccine told me unvaluable...
     
  14. Murack

    Murack Registered Member

    Joined:
    Dec 18, 2008
    Posts:
    23
    Location:
    Italy, Sicily
    Hi

    I tried this tool to understand that changes made to the system

    First, I have disabled autorun through the command gpedit.msc

    Second, I have used MS Powertoys
    http://www.wikihow.com/Disable-CD-and-DVD-Autorun-in-Windows-XP

    So, under Returnil and Comodo with Paranoid Mode, I started panda and I saw this change to the register

    http://img14.imageshack.us/img14/1354/38896113.jpg

    http://img7.imageshack.us/img7/2552/29359967.jpg

    I wonder if this change is really needed or not

    before using panda, I inserted a usb pen infected and the autorun did not start, and my avira premium did not find anything

    after, i inserted usb pen infected in another pc (without autorun disabled) and avira blocked autorun

    What do you think?

    thanks :)

    ps: i'm sorry for my english :doubt:
     
  15. yashau

    yashau Registered Member

    Joined:
    Oct 13, 2008
    Posts:
    151
    Sorry but doesn't Flash Disinfector pretty much do the same thing?
     
  16. Saraceno

    Saraceno Registered Member

    Joined:
    Mar 24, 2008
    Posts:
    2,404
    Make sure you remove all documents/programs from your drive.

    Then while in windows explorer, right-click on your drive and select 'format'. You can select either FAT or FAT32, or return it back to NTFS later if you wish.

    Do a full format, rather than a quick format. Once complete, return your documents/programs back to your USB.
     
  17. progress

    progress Guest

    So is it true or false? o_O
     
  18. bonedriven

    bonedriven Registered Member

    Joined:
    Jan 14, 2007
    Posts:
    565
    Hi,I have similar experience. Check this post. However both my pen usb and pc were vaccined,only Avira finally stopped it.
     
  19. progress

    progress Guest

    :(

    I vaccined my laptop but the USB autorun is still active, why? :rolleyes: Where is pbust? :)
     
  20. pbust

    pbust AV Expert

    Joined:
    Apr 29, 2009
    Posts:
    1,173
    Location:
    Spain
    We'll release a version soon that has experimental support of NTFS drives.


    Vaccination is twofold... you can vaccinate either the PC or individual USB sticks, or both. Vaccinating the PC doesn't vaccinate individual USB sticks and viceversa.

    Plugin your USB stick, run Panda USBVaccine and then vaccinate the USB drive.
     
  21. progress

    progress Guest

    I see, now it works :) One more question: Why should I vaccinate my harddisk?
     
  22. pbust

    pbust AV Expert

    Joined:
    Apr 29, 2009
    Posts:
    1,173
    Location:
    Spain
    It's not really the hard disk you vaccinate when you choose "Computer Vaccination". This simply enters a registry key which disables the mapping of INF files to disable autorun. This only works for the "PC itself". We also recommend to vaccinate each USB stick individually so its not infected when you insert it in other PCs.
     
  23. Someone

    Someone Registered Member

    Joined:
    Jan 18, 2008
    Posts:
    1,106
    Does Panda use the method outlined here?
     
  24. pbust

    pbust AV Expert

    Joined:
    Apr 29, 2009
    Posts:
    1,173
    Location:
    Spain
    Yes for the "Computer Vaccination" option.
    No for the "USB Vaccination" option.
    :)
     
  25. Someone

    Someone Registered Member

    Joined:
    Jan 18, 2008
    Posts:
    1,106
    OK, that's good to know. :)
     
Loading...
Thread Status:
Not open for further replies.