Re: Autorun programs from flash drive.

Hi,

Windows wont Autorun on USB storage device automatically like in
CDROMs but will Autorun when user double clicks the Drive Icon in My
Comp. U3 on other hand would add a CDROM device which would make
windows Autorun *that* U3 CDROM hence U3 is indirectly achieving
Autorun on USB storage. Also, its pretty easy to stop Autorun feature
from registry (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom
Value=AutoRun, DWORD, Disable=0).

Regards,

On Wed, Apr 16, 2008 at 8:38 AM, <arckeda@xxxxxxxxx> wrote:
Hello, and thanks for reading this. I am sure we are all know of the Autorun feature in Cdroms and Dvdroms, how the program just runs out of the box. I am trying to figure out how to include this functionality in flash drives.

/* I have a SD card with a USB adapter to test with. */

This would allow, say, for me to quickly insert a drive into a computer, have it silently run something like Meterpreter or another backdoor program, and then have remote access to the computer, assuming Windows runs it and doesn't detect a malicious program. I understand that Windows by default will not run Autorun.inf by default on flash drives, except the U3s. But I have also heard that you can format a flash drive to look like a cdrom to Windows. This is about all I know. If you have any more information, or would know about how to go about doing this, please tell me.

Thank you again.

-ARCKEDA

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------





--
("Computers are useless. They can only give you answers." - Pablo Picasso)

Shreyas Zare
Co-Founder, Technitium
eMail: shreyas@xxxxxxxxxxxxxx

..::< The Technitium Team >::..
Visit us at www.technitium.com
Contact us at theteam@xxxxxxxxxxxxxx

Technitium Personal Computers
We believe in quality.
Visit http://pc.technitium.com for details.

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

Relevant Pages

  • Re: Is autorun AND autoplay really off (CD/DVD drive)?
    ... I have a prob with autorun in that when I start my Ulead Movie Maker prog ... >> 2) if your goal is to stop AutoPlay upon disk insertion, ... >> UNCHECK the cdrom and dvd drives. ...
    (microsoft.public.windowsxp.general)
  • Package to CD in 2003
    ... After packaging to CD ROM as a pps the CDROM does not Autorun when inserted ...
    (microsoft.public.powerpoint)
  • Installation of Fedora
    ... I burned all 4 files to CDROM as instructed and my computer is set to ... receive autorun and boot from CDROM but the disc wont start, ...
    (Fedora)
  • Re: cdrom drive does not open automatically after I insert a cd
    ... I have checked the following settings of the CDROM. ... Does anyone has a suggestion? ... Some of this will not apply, I'm sure, but check the Registry entries ...
    (microsoft.public.windowsxp.basics)
  • Re: Autorun on USB Flash Drive
    ... What must I do to trigger Autorun on my USB storage device? ... The Autorun capabilities are restricted to CD-ROM drives and fixed disk ... The removable media device setting is a flag contained within the SCSI ...
    (microsoft.public.dotnet.languages.vb)