Re: Shift and PenDrives



So...

Is there any way to prevent executing autorun.inf in a pendrive when inserted?

"Mantas Mikulėnas" wrote:

Francisco Gomez wrote:
Does really pressing 'shift' when inserting a pendrive prevent being infected
from it?

No.

I suppose that it prevents executing 'autorun.inf' and other autoplay
options... So the virus, usually contained in an "exe" or another executable
launched during autoplay, is stopped. Then, you can manually delete it (using
shell window you can change attribs and remove those system / read-only files)

First, AutoRun and AutoPlay are separate things. AutoRun executes the
autorun.inf file. AutoPlay just scans the disk for
pictures/music/movies/stuff.

Second, at least in Windows XP, autorun.inf's on pendrives aren't
executed automatically - you still get the autoplay's "choose action"
screen. So even if you don't hold Shift, nothing will be automatically
launched from a pendrive.

I don't know if are there boot serctor viruses active that could hide in a
pendrive.

A pendrive isn't that different from a hard disk - it has boot sector,
it can have partitions, etc. But the boot sector is only executed when
you boot the system from the drive.


--
Mantas Mikulėnas <email = base64.decode("Z3Jhd2l0eUBjbHVlbmV0Lm9yZyA=")>
PGP/GPG: 0xCA07F3A91C9F7C03 <http://rootshell.be/~grawity/>
ASCII ribbon - against HTML email <http://www.asciiribbon.org>

.