Disabling Windows Autorun w/TweakUI.....?

Discussion in 'Malware Help (A Specialist Will Reply)' started by CarnivalGurl, Mar 28, 2009.

  1. CarnivalGurl

    CarnivalGurl Private E-2

    Hey All,

    Am following instructions on improving my pc's security and would like to know if disabling Autorun, on all drives but C:\ , using TweakUI's function resolves the security issue associated with it?

    Much Thanks!:)

    ( Am running Windows XP Pro with all service packs. )
     
    Last edited: Mar 28, 2009
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    No. In fact I believe TweakUI only has options for AutoPlay not AutoRun which are not the same.

    We have had some discussions about this in our Malware Fighters private forum and Shadow_Puter_Dude also provided some additional info on the subject along with a registry patch. The below are exerpts from these discussions.

    AutoPlay asks the user what action to apply and AutoRun just immediatly executes. To properly get AutoRuns disable you need to apply a patch from Microsoft first. The patch is OS dependent. So for example with Windows XP you would need to load this patch: http://www.microsoft.com/downloads/details.aspx?FamilyId=CC4FB38C-579B-40F7-89C4-1721D7B8DAA5&displaylang=en

    You need to have WinXp SP2 or SP3 to use this patch.

    Then you would apply the below registry patch.


    "AutoRun"=dword:00000001 will allow the CD/DVD drive to send a MCN when a CD/DVD is inserted or changed.

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf @="@SYS:DoesNotExist" tells Windows to read all autorun commands from the registry key DoesNotExist instead of autorun.inf; and since the registry key does not exist there are no autorun commands to be read.

    MountPoints2 is removed as a precaution, as it is not certain if the settings in MountPoints2 take precedence over other registry settings.


    Of course, all this does not prevent the system from being infected by users running an infected executable on removable media.
     
    Last edited: Apr 2, 2009
  3. CarnivalGurl

    CarnivalGurl Private E-2

    Thanks Chaslang!

    I'm not sure the my XP Pro is genuine, thus am leery about obtaining the Microsoft patch. (Hoped TweakUI's function would be a way around that.) Apparently not. Will try your 'prescription' and appreciate your help!

    Have a Great Day,
    CG :)
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay then we cannot help you any further on this anyway since we do support use of illegal software.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds