What is the use of Script Defender?

Discussion in 'other anti-malware software' started by sg09, May 24, 2010.

Thread Status:
Not open for further replies.
  1. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    ohh...:p I thought we can disable use of unknown/not-installed USB through some registry changes...:D Or is there any way to do that?:rolleyes:
     
  2. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    disable the auto play for xp home not pro version
    For operating systems that do not include Gpedit.msc, follow these steps:
    Click Start, click Run, type regedit in the Open box, and then click OK.
    Locate and then click the following entry in the registry:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoDriveTypeAutorun
    Right-click NoDriveTypeAutoRun, and then click Modify.
    In the Value data box, type 0xFF to disable all types of drives. Or, to selectively disable specific drives, use a different value as described in the "How to selectively disable specific Autorun features" section.
    Click OK, and then exit Registry Editor.
    Restart the computer.
     
  3. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    I guess this will not disable my already installed USB, only those that are not recognized... Sorry, but I am a little noob at registry things...:p
     
  4. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    this will do the job trust me;) what system do you have?
     
    Last edited: May 29, 2010
  5. Rmus

    Rmus Exploit Analyst

    Joined:
    Mar 16, 2005
    Posts:
    4,020
    Location:
    California
    Yes, that's possible, as has been pointed out.

    But why disable a perfectly good, useable feature? In my view, that's giving in to the fear of an autorun attack, when simple policies and procedures protect from such an attack.

    ----
    rich
     
  6. AvinashR

    AvinashR Registered Member

    Joined:
    Dec 26, 2009
    Posts:
    2,063
    Location:
    New Delhi Metallo β-Lactamase 1
    How about protecting it from AppLocker or SRP Policy...? I mean we can enable these policies to protect ourself from Autorun attacks, i guess.
     
  7. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    I trust you...:D I use Win7 32bit (Laptop) and Vista 32bit (Desktop)

    Nope just curiosity :cool:, Although I have no real knowledge on registry, I thought this should be possible.:)

    Yes possible :), see here
    https://www.wilderssecurity.com/showthread.php?t=273663
     
  8. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    or just get PE Guard;) very handy dandy tool and it protects the usb in real time
     
  9. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    Yes that's a nice app indeed.:thumb:
     
  10. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    and it is very nice light and it protects againts rootkits:),if i dont have a licence for mamutu i will for sure use it:)
     
  11. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    Can't you keep it with mamutu? It is a BB I think and you can set its alerts to low.
     
  12. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    i will try to run both again but last time i did PE Guard was alerting first all the time defeating mamutu's purposes:D i want mamutu to work hard man:D
     
  13. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    or even man take a look at this WinPatrol Plus already locks down AutoRun entries, FileType associations and a host of other system configurations. Now, users can pick and choose registry entries they decide should never change.
     
  14. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    haha..:D I also have a license for Mamutu, but often hangs on my system.:'(
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.