June 1, 2009

How to stop "Memory Stick Worms"

There's been a lot of talk on the net about how the latest way to spread worms is via memory sticks (a.k.a. "Thumb Drives"). It basically takes advantage of the default action Windows takes when a removable media (diskette, CD,DVD, memory stick) is inserted. It will automatically execute the AUTORUN.INF file if it exists on the media.

Microsoft has a solution, but it disables ALL AUTORUN.INF executions, including CDs & DVDs. In a blog posting by Nick Brown, he describes a simple registry fix that will disable only memory sticks, leaving the other media free to execute AUTORUN.INF.

If you want to stop all executions of AUTORUN.INF, MS has a KB article on how to do it.


Post a Comment