Think you disabled autorun, maybe you didn't.

Searching_ _ _ · Jun 6, 2009

With Windows Vista, the NoDriveTypeAutoRun registry value actually has the opposite behavior than what Windows has documented. In other words, if you think that you have protected yourself by restricting AutoRun with this registry value, you have actually put yourself at additional risk. We have published details about this issue as US-CERT Vulnerability Note VU#889747. The end result here is that a user may inadvertently execute code by clicking on the icon for a device, such as a USB thumb drive.

Although the documentation for NoDriveTypeAutoRun indicates that Windows will not use AutoRun features on USB mass storage devices, this does not necessarily mean that users can safely plug any USB device into their system. For example, a system will recognize Sandisk U3 USB devices as both a CD-ROM device and a USB mass-storage device. Considering that an attacker can easily modify the CD-ROM contents of a U3 device, you now have a way for an attacker to execute code of their choice on a Windows system by simply plugging in a small USB device. No other user interaction is required.

Click to expand...

The Dangers of Windows Autorun

Mrkvonic · Jun 6, 2009

Here you go, case closed:

http://nick.brown.free.fr/blog/2007/10/memory-stick-worms

Cheers,
Mrk

Log in or Sign up

Think you disabled autorun, maybe you didn't.

Searching_ _ _ Registered Member

Mrkvonic Linux Systems Expert

Log in or Sign up

Think you disabled autorun, maybe you didn't.

Searching_ _ _ Registered Member

Mrkvonic Linux Systems Expert

Useful Searches