Warning! Anti-autorun folders ARE at stake!

Discussion in 'malware problems & news' started by Bensec, Sep 3, 2008.

Thread Status:
Not open for further replies.
  1. Bensec

    Bensec Registered Member

    Joined:
    Aug 4, 2008
    Posts:
    177
    Location:
    China Changsha
    Someone may create the "autorun.inf" folder on their usb pen drives, memory cards or harddisk partitions. Some of you even use special tools to create ill-formed sub-folders to protect the "autorun.inf" fold from being removed.

    Recently, I am informed that these folder tricks can by no means secure your partition or usb drives any more. just one simple command-line instruction, can wipe all these ill-formed folders out of any non-ntsf partitions, with no effort! So, be sure you have a real time scanner, monitoring the USB storage device all the time. Watch out guys, if you are using this trick to fight autoruns.

    PS:
    eg. the mighty command for removing anti autorun folders on D:\ is "rd /s /q \\?\d:\autorun.inf" (see the path? it is the magic here!)
     
  2. ggf31416

    ggf31416 Registered Member

    Joined:
    Aug 20, 2006
    Posts:
    314
    Location:
    Uruguay
    Just rd D:\autorun.inf will delete them too. You don't need "magic" paths to delete a folder.
    It's well known that creating an autorun.inf folder will offer some protection only if the malware's author is enough st##id to don't check if there is a folder with the same name.
     
Loading...
Thread Status:
Not open for further replies.