Re: Shift and PenDrives



So...

Is there any way to prevent executing autorun.inf in a pendrive when inserted?

"Mantas Mikulėnas" wrote:

Francisco Gomez wrote:
Does really pressing 'shift' when inserting a pendrive prevent being infected
from it?

No.

I suppose that it prevents executing 'autorun.inf' and other autoplay
options... So the virus, usually contained in an "exe" or another executable
launched during autoplay, is stopped. Then, you can manually delete it (using
shell window you can change attribs and remove those system / read-only files)

First, AutoRun and AutoPlay are separate things. AutoRun executes the
autorun.inf file. AutoPlay just scans the disk for
pictures/music/movies/stuff.

Second, at least in Windows XP, autorun.inf's on pendrives aren't
executed automatically - you still get the autoplay's "choose action"
screen. So even if you don't hold Shift, nothing will be automatically
launched from a pendrive.

I don't know if are there boot serctor viruses active that could hide in a
pendrive.

A pendrive isn't that different from a hard disk - it has boot sector,
it can have partitions, etc. But the boot sector is only executed when
you boot the system from the drive.


--
Mantas Mikulėnas <email = base64.decode("Z3Jhd2l0eUBjbHVlbmV0Lm9yZyA=")>
PGP/GPG: 0xCA07F3A91C9F7C03 <http://rootshell.be/~grawity/>
ASCII ribbon - against HTML email <http://www.asciiribbon.org>

.



Relevant Pages

  • Re: Shift and PenDrives
    ... AutoRun and AutoPlay are separate things. ... AutoRun executes the ... Second, at least in Windows XP, autorun.inf's on pendrives aren't ... A pendrive isn't that different from a hard disk - it has boot sector, ...
    (microsoft.public.security.virus)
  • Shift and PenDrives
    ... Does really pressing 'shift' when inserting a pendrive prevent being infected ... I suppose that it prevents executing 'autorun.inf' and other autoplay ... So the virus, usually contained in an "exe" or another executable ...
    (microsoft.public.security.virus)
  • Re: Autoplay not wanted
    ... Trev wrote: ... to run everything under the sun from the drive. ... How do I prevent it doing this autoplay in the first place? ... Then it can be difficult to get out of whatever it is executing. ...
    (uk.comp.homebuilt)