Disabling autorun in Windows is a must especially if you’re like me who doesn’t run an antivirus. Most of the time an experience computer user is able to determine if a file is dangerous or not by looking at the icon, file name, double extension, file size and where it is downloaded from. No matter how experience or smart the computer users is, some day he/she will be careless. I can never forget that one nasty virus managed to get into my computer and corrupted all my executable (.exe) files because I was “careless” and tired after a hard days work. All I did was open My Computer, double click on the drive letter to access my USB pen drive and poof! that activated the virus via hidden autorun.inf.
The best solution I’d say is to create a registry key that totally disables Windows from processing autorun.inf file. A year ago I’ve shared with you all on how to do that by creating a registry key and then merge it into your computer. If you have trouble editing registry, then here is a tool from Panda Security that is able to do the exact same thing with a click of a button. I know that it works exactly the same as the registry tweak I posted last year by using SysTracer to take my system’s snapshot and then comparing the snapshots from before and after vaccination.

Panda Security has recently came up with a small portable tool that is able to “vaccine” your computer from virus that spreads through external USB drives. The computer vaccination prevents your computer from executing autorun.inf file and the USB drive vaccination creates a dummy autorun.inf file in your external usb drive so that virus can’t infect it.

It is weird that when I ran USB Vaccine on my laptop and saw that my computer is NOT vaccinated although I remembered very clearly that I’ve already disabled autorun.inf via the registry tweak. If I am not wrong, the setting was removed by registry cleaner software. So for those that use registry cleaners, make sure you run USB Vaccine after finish scanning and cleaning.
A lot of newer generation antivirus software such as the latest ESET v4, RISING 2009, Kaspersky 2009 and etc has protection against USB virus. Still, it is always better to disable autorun.inf because if your USB drive has a virus that is yet to be detected by the antivirus software, your computer will be a victim of the virus.
Just wanted to share an experience with you all. In one of my workplace where I maintain hundreds of HP computers, disabling autorun.inf GREATLY reduced the risk of the computers being infected by virus. On computers that I did not vaccine, it took merely a few days for the whole computer lab to get infected by virus and I had to clone them all over again.
[ Download Panda USB Vaccine ]
Related posts:
I use Panda Vaccine-simple and good
I’ve created small utility for protecting usb drives. It creates or modifies dummy file which takes all free space and there is no more space for viruses – code.google.com/p/usbdummyprotect/
Cine naiba v-a invatat sa scrieti in limba romana ? Femeia de serviciu ? Pun pariu ca si ea ar scrie mai corect ca voi.
Va credeti mari tehnicieni de computere, dati asistenta PC si nu sunteti in stare sa scrieti 2 cuvinte corect. Lasati-va de meserie baieti (sau fete) si apucati-va de invatat limba romana.
Rusine sa va fie !
I’m using Autorun Eater
killvearn.com/blog/autorun-eater/
Cannot immunize NTFS volumes.
Does this panda vaccine can disable autorun files in your computer not only in Flash drive or USB??
It still boggles my mind on why you don’t have an AV installed Ray. :D
thanks raymond…..
Thanx for you great info Raymond.cc
Guys have a look at Flash Disinfector Freeware
I love the Panda vaccine. Its awesome.
@mk
Yes
Yes
No
Yes, there is a GUI button to remove the vaccination from a PC.
Yes. I use it on all my SD cards, MP3 players etc. The only issue is that to remove the vaccine from a portable media you have to reformat the media.
Great post Raymond.
It was great pal… thanks.
Thanks. I m now using the Panda USB Immunizer. Works like a charm and is damn useful.
The reason it probably shows your system as not being vacinnated is because this disables autorun via a different method.
This looks like it invalidates all autorun inf files.
The most common method is changing the settings:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
“NoDriveTypeAutoRun”=dword:000000ff
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
“NoDriveTypeAutoRun”=dword:000000ff
“HonorAutoRunSetting”=dword:00000001
These will also prevent that annoying window that scans files on your disks, and pops up a window when you insert a disk.
I actually run this off my USB drive and it’s one of the first things I run on an infected computer, even though I’ve immunized my Flash Drive. That way, the malware doesn’t spread. I also use this with your Dummy file post, both of which were major helps Raymond. I’ve got an issue on my family’s computer, and will be posting it later in the forum. But for now, this was a life saver, since I used it to make sure my USB Toolkit remains a Toolkit and not a Tool for Malware ;)
thank ray;
when i try to vaccinate usb 1 by 1, the program say it only support FAT volume. how can i get around it??
Aloha, yeah I’ve previously written about InstallWatch. I prefer SysTracer because it’s my personal preferences.
raymond.cc/blog/archives/2009/02/28/tracking-registry-and-files-changes-when-installing-software-in-windows/
it is a 380 kb download sorry for posting again
I think a great info. again as it also from good software company and thanks for this
thanks ray for one more exceptional post..
i have some queries for u
1 will this disable cd/dvd drives in addition to usb drives
2 will i have to selecti individually all the usb drives or it will do so
3 once i run registry cleaner do i have to revaccinate everytime?
4 is this reversible? means if i want to reenable autorun how do i do that?
4 will it apply to all usb drive gadgets like cameras too?
thanks in advance for answering all my silly queries.
thx ray for the vaccine!
hehe
Great tip mate, thanks!
thanks raymond.. i m a gret fan of u 4 d tips u provide.
Why SysTracer when you have InstallWatch which is free and far better app??? SysTracer is 50 USD? WTF?
i have had that same problem with my flash drive. i will check it out thanks raymond.. : )
nice stuff……..my PC has ESET v.3.0…. which I dont think has USB vaccine like protection from autorun files…
Are you sure that my PC is now safe from autorun files…..on USB devices, after I have installed this softeare……thanks to you.
and one more thing will it not affect the USB peripherals that I have..
Raymond, thanks again keep up the good job….u r gr8
great, thanks.