앞주머니

Good Field 2007. 9. 21. 04:12
posted on Sunday, May 06, 2007 5:40 AM by Thushan Fernando

Malware on USB Drives new? Disable autorun on USB Drives!

I was just reading a news thread on eWeek about Malware targeted at USB Drives and had a little chuckle! Its not exactly new, Swinburne's, RMIT's and a couple of Melbourne Uni computers I've used are infected with worms that propogate from people's USB Drives when mounted. Everytime you mount your USB you'll be helping the worm move to new machines. Originally I *was* going to tell our Administrator's at uni regarding this (as far back as early to mid last year) but put it off after I heard someone who did complain got the matter shrugged off. But now I guess this type of issue is in the open they may actually start to do something about it.

So how do you prevent your machine at home/lappy from being a target? For the moment, disable autorun so when you mount your USB drive it will not execute the autorun.inf file. Alternatively at uni hold down SHIFT when you plug in your USB drive so it will avoid running autorun.inf.

To make it easier:
  1. Start > Run, type in 'gpedit.msc' without the quotes, this will show you the Group Policy Editor.
  2. Goto 'Computer Configuration' > 'Administrative Templates' > 'System' and select 'Turn Off Autoplay'
  3. When the properties for the policy pops up, check 'Enable' and select 'All Drives' and hit OK.
There! Sorry, Mac / Linux users miss out on the fun;-)
 
http://blogs.developerfusion.co.uk/blogs/thushan/archive/2007/05/06/3066.aspx