Virus infection by autoplay, how to prevent it

Lists of posts in - Dealing with Viruses

  1. An introduction to Viruses
  2. Virus infection by autoplay, how to prevent it
  3. Windows virus infects Linux

One of the main reasons of rapid spreading of viruses is due to the presence of Autoplay in Windows. Autoplay feature was originally introduced to enhance user experience. An easy way for a virus to enters a PC is through exploiting this option. You can see Autoplay in action when a driver CD of you Motherboard or a Printer start its installation process as soon as you inserts it. Here let us look at how Autorun can be added to a drive (CD, USB, HSS etc..) and make it Windows open a program automatically when you puts it in or double clicks it.

Adding Autoplay to any drive is as easy as creating a text file and typing some commands into it. Have a look at the Autorun.inf file (this makes Windows run programs automatically from CDs) of the Microsoft Office 2007 CD.

Autorun file can add options to the default right click menu.

The Right Click menu has been modified according to the entries in the autorun.inf file. The file need to be saved with the name Autorun.inf  The bad part is that autoplay can be added to any drive. And a virus can create an autorun file in a USB drive inserted into an infected system. It then makes the autorun file such that not only does the autoplay option open an infected file but the Open and Explore commands in the right click menu will also do the same.

This is the Screen shot of an Autorun.inf file created by the virus Infostealer.Wowcraft.D virus

An autorun file created by a Virus

It will automatically install itself with out you ever knowing, if autoplay is enabled. You might have figured out how easy a virus can infect a Windows based system.

Prevention :

As they say prvention is better than cure. Here are some steps you can take to prevent infection of viruses due to Autoplay.

1. Disable autoplay (more baout this on next post in this series)

2. Always Open a CD or Pen Drive (USB stick) by using the pull down menu of your address bar. You can also type the drive letter followed by a “ : “  eg. D: in the address bar or Run box and press enter.

More about disabling autoplay will be posted in the next post.

Buy me a cup of hot coffee - help me keep posting all through the night

If you are new here you may want to subscribe to this blogs full feed RSSSubscribe to full feed RSS of this blog
so that you will get the updates automatically to your feed reader.

Tags: , , ,

You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

3 Responses to “Virus infection by autoplay, how to prevent it”

  1. Thanks for such an informative article, it will be of benefit to many such as myself.

    [Reply to this comment..]

  2. [...] updated Virus infection by autoplay, how to prevent itHow to view all drives, Disk Management under WindowsMicrosoft should be penalisedFirefox 3 beta [...]

  3. [...] temporarily downOpera doesn’t accept text in Tiny MCE - WordpressFree font previewing utitlityVirus infection by autoplay, how to prevent itHow to view all drives, Disk Management under [...]

Leave a Reply



My Google  Netvibes  My Yahoo!  Windows Live  Bloglines  Newsgator