Disable USB and CD-ROM Autorun features

Hi, from my personal experience is malwares can be spread through CDROM or USB removable drive. So the best precautions that can be done on personal systems is to disable the USB removeable and CD-ROM Autorun features. These steps is very simple.

Step 1:

Start --> Run --> regedit

Step 2:

Browse to

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Export the registry key before do any changes.



Step 3:

Change the "NoDriveTypeAutorun" from value 91(Hex) to FF(Hex); This is to avoid worry for the autorun on devices.



Note: if "NoDriveTypeAutorun" not exist, you can simply create one with assign name "NoDriveTypeAutorun" without quote.



Step 4:

Click File --> Exit

Reboot system to changes take effect.

As usual, do it in your word risk.

Updated on 17-Aug-09 http://www.us-cert.gov/cas/techalerts/TA09-020A.html

III. Solution

Disable AutoRun in Microsoft Windows

To effectively disable AutoRun in Microsoft Windows, import the following registry value:

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]

@="@SYS:DoesNotExist"

To import this value, perform the following steps:

1. Copy the text

2. Paste the text into Windows Notepad

3. Save the file as "autorun.reg"

Note: In certain circumstances, Notepad may automatically add a .txt extension to saved files. To ensure that the file is saved with the proper extension, select All Files in the "Save as type:" section of the "Save As" dialog.

4. Navigate to the file location

5. Double-click the file to import it into the Windows registry

Microsoft Windows can also cache the AutoRun information from mounted devices in the MountPoints2 registry key. We recommend restarting Windows after making the registry change so that any cached mount points are reinitialized in a way that ignores the Autorun.inf file. Alternatively, the following registry key may be deleted:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2

Reference: http://www.us-cert.gov/cas/techalerts/TA09-020A.html

Thanks,

656173747265646576696C