Autorun.inf [RESOLVED]

Is there a way to get an alert when the operating system tries to read the autorun.inf file from an external disk?

Probably not.

Though I guess the Update to the AutoPlay functionality in Windows might prove an useful alternative.

Such update provides the same approach enforced on Windows 7 even on previous versions and disable AutoRun task in the AutoPlay dialog for devices that are not removable optical media (CD/DVD) whereas IIRC previous updates should have already disabled auto execution of autorun files on such devices.

I have it disabled, but I am not sure whether doing that will be good enough.

Is there an alternative with CIS itself? I am guessing that CIS would alert me of the executions of files from removable drives?


Goto my Blocked files, and add “*:\Autorun.inf” without the quotes.

That should block every Autorun in any drive.

I don’t want to block autorun. I want to get alerts when files from external disks auto-execute. That should be enough, shouldn’t it?

Slightly OT: What is the difference between autorun and autoplay? Will having also autoplay enabled prove dangerous? And, finally, is there a way with Defense+ to block both?

Thanks for the link. I was not aware of this trick :-X

It doesn’t look like I’ll be getting an answer. But, please! Answer this question, at least - Is it safe to insert infected CDs or flash disks with D+ in Clean PC mode?

Yes. Software executed from removable media is always treated as non-trusted and will produce alerts.

I am safe, then. Thanks, that is all I needed.