USB Vaccine (basicly lock down AUTORUN.INF)

Basicly something like what panda usb vaccine does

in quote

The Panda USB Vaccine allows users to vaccinate their PCs in order to disable AutoRun completely so that no program from any USB/CD/DVD drive (regardless of whether they have been previously vaccinated or not) can auto-execute.

The Panda USB Vaccine also can be used on individual USB drives to disable its AUTORUN.INF file in order to prevent malware infections from spreading automatically. When applied on a USB drive, the vaccine permanently blocks the AUTORUN.INF file, preventing it from being read, created, deleted or modified.

Once applied it effectively disables Windows from automatically executing any malicious file that might be stored in that particular USB drive. The drive can otherwise be used normally and files (even malware) copied to/from it, but they will be prevented from opening automatically.


While I know how to do it, offering a program to do that would be nice. Some people here have been infected by memory sticks :cry:
There’s example heres that could be prevented

Seems like a great prevention measure, UNLESS you have some programs running that require it.

I think a USB scan would be awesome. Right when you plug a USB in, it sandboxes it then scans all of the items, and then uploads them to the cloud.

I agree with this idea. As a PC repair tech, I’ve seen infected USB drives bring down systems I just spent hours cleaning. Something similar to the Technician Toolkit or the USB Vaccine would be great.

You do not need any additional “bloody USB Vaccine” for goodness sake !!!, jay2007tech

Just follow the instructions posted in multiple “Pro-sites” (including MS advice/article) & run the freaking script!

That will disable the pity thing forever on any existing OS & the silly feature will not be available for any device

That’s very sad that some users do not know that yet

Cheers!

Just follow the instructions posted in multiple "Pro-sites" (including MS advice/article) & run the freaking script!
I know how to disable Autoplay and autorun for XP, vista and 7. I know there are alot of scripts out there, this is the one I choose to run. I just like for it being able to lock the autorun.inf file

I was just recommending comodo creat a script to do it for the users here

In fact, it’s easy to do the SAME as panda usb vaccine. I’ll even write how they did it

  1. For the USB part, you want to lock autorun.inf. Right?? :slight_smile:

2)Use winhex(or your favorite program), and find autorun.inf, look for byte “20” and change it to “40”

  1. Rename the file to autorun_.inf
    Don’t forget to save :slight_smile:

What do you think SiberLynx :slight_smile:

oops… I forgot to add this. This is from from Interesting Technique (Lock a file) - AutoIt General Help and Support - AutoIt Forums

Hi jay2007tech ,

As for the part #1 - we mainly have the same approach

  1. Autoruns must be disabled Globally. That “convenient” feature is dead and must be killed. You cannot have it when working with WinDos;

  2. Win7 addressed that partially though a little bit better by default, but still not enough;

  3. I am sick & tired to repeat what was posted dozens if not hundreds of times in this and other forums - read MS Articles regarding the matter & apply existing script(s);

  4. there are many free and perfectly working Software in addition to the above (again was posted many times here)

The conclusion: another Utility that are asked to be developed by Comodo would be redundant / absolutely unneeded

As for the part #2:

No, you don’t need that if all the above is in place.
Moreover using either WinHex or any other similar editor cannot be advised to the majority of users.
Not that I am saying that they are dumb … sure not! Anybody who has a will to learn will eventually succeed
But again, it is not needed & less experienced users will do more harm to their system rather than eliminating the particular issue
Why would you do that instead of performing basically one click running the script ???

The endless re-occurrences of the similar request re: USB and endless reports about being infected by inserting USB is nothing more than a clear proof that there are still many inexperienced users that even cannot search & read the forum in order to find existing discussions and solutions concerning the matter

Finally, because of that it would be very helpful to create specially dedicated merged thread, which can be referred.
The the script / links to MS articles / other solutions / etc can be gathered there

… a bit of a work for mods hehe! :stuck_out_tongue:

Cheers!

SiberLynx,
I always love your words of wisdom, When the next football game is on, I’ll drink a ■■■■ for ya :■■■■ :■■■■ maybe 2 beers :slight_smile:

less experienced users will do more harm to their system rather than eliminating the particular issue
I can >:-D imagine >:-D the possibilities of what an inexperienced user can do with a hexediter :P