Changes

Autorun

2,086 bytes added, 18:43, 31 March 2016
The following lines were added (+) and removed (-):
Some terminology relating to or sometimes used synonymously are '''Autoplay''', '''Autorun''', and '''Auto-insert notification'''.Some terminology relating to or sometimes used synonymously are '''Autoplay''', '''Autorun''', and '''Auto-insert notification'''. Some sources use the terms autorun and autoplay interchangeably, while others point out that Autoplay is an enhancement to autorun introduced in Windows XP, where as autorun itself dates back to Windows 95.  Autoplay will distinguish different media types and content types taking different preprogrammed action for each type.  For example, a music CD will take a different action from a data CD being inserted.  The autorun behavior can launch software without your consent and furthermore, actually install malware on your computer without your knowledge with full stealth proficiency.   The autorun behavior can launch software without your consent and furthermore, actually install malware on your computer without your knowledge with full stealth proficiency.   <big>Note: This article describes more than one method to disable this behavior.  The best recommended method is to use '''Group Policy Editor'''.  For the impatient, simply read [[#Turn off Autoplay With Group Policy Editor]] or look for it in this guide below.</big>== Permanently Disable Behavior ==== Turn off Autoplay With Group Policy Editor ===== soft disable ==={{:Turn off Autoplay With Group Policy Editor}}Disabling AutoPlay in Windows XP through Windows Explorer=== Policy Edit in the Windows Registry ===#Open My Computer or Explorer#Right-click the CD-ROM drive or other drive and click Properties.#Click the AutoPlay tab. Within this section you will be able to specify all Windows AutoPlay features.Disable AutoPlay on audio CDsThis is low level approach to manipulating policies in Windows. If you use Group Policy Editor you will '''NOT''' need to do this.#Click Start, Programs, Windows Explorer#Within Explorer click View and then Folder Options.#Click the File Types tab and locate "CD Audio Track" category within the list of available file types.#Highlight " CD Audio Track" and click Edit or Advanced.#In the Actions category change the default from Play to Open or none. The Windows Registry solution below is the most effective, in that it prevents any drive io activity after media is inserted, however, also has some technical ramifications. === Policy Edit ====== OS Specific Methods Using Policy Editor ===Update:  The default settings for NoDriveTypeAutorun are different between Windows 2000/2003 and Windows XP/Vista.  This is explained very well by Minkus on edugeek.net in the thread  [http://www.edugeek.net/forums/windows/25714-advanced-autorun-autoplay-settings-adm-file.html Advanced Autorun / Autoplay settings ADM file] (''mirrored on our talk page'').  Credit to Minkus.Windows XP Pro== Other Ways to Disable Behavior ==#Remove media from the computer.=== soft disable ===#Go to Start<Run, type 'gpedit.msc' (without the quotes) and click OK. This will open up the Group Policy Editor.#Expand the following (in order): Computer Configuration<Administrative Templates<System.#Click on the System folder, then on the right double-click on the 'Turn AutoPlay off' option.#Select Enable and for 'Turn off AutoPlay on' set to All Drives. Click OK, close the Group Policy Editor and restart the computer.Windows VistaDisabling AutoPlay in Windows XP through Windows Explorer#Open My Computer or Explorer#Right-click the CD-ROM drive or other drive and click Properties.#Click the AutoPlay tab. Within this section you will be able to specify all Windows AutoPlay features.#Remove media from the computer.Disable AutoPlay on audio CDs#Go to Control Panel<Hardware and Sound<Play CD's or other media automatically.#Click Start, Programs, Windows Explorer#Uncheck the box at the top of the window next to "Use AutoPlay for all media and devices".#Within Explorer click View and then Folder Options.#Click the Save button and close Control Panel.#Click the File Types tab and locate "CD Audio Track" category within the list of available file types.#Optional: Same method for disabling in Windows XP Pro can also be used.#Highlight " CD Audio Track" and click Edit or Advanced.#In the Actions category change the default from Play to Open or none.Windows 7The Windows Registry solution below is the most effective, in that it prevents any drive io activity after media is inserted, however, also has some technical ramifications. #Remove media from the computer.#Go to Control Panel<Hardware and Sound<AutoPlay.#Uncheck the box at the top of the window next to "Use AutoPlay for all devices".#Click the Save button and close Control Panel.=== Additional Security and Support ===CERT ADVISORY 14 Apr 2009: VU#889747: [https://www.kb.cert.org/vuls/id/889747 Microsoft Windows fails to properly handle the NoDriveTypeAutoRun registry value].  This issue is addressed for Windows Vista and Server 2008 systems in Microsoft Security Bulletin [http://www.microsoft.com/technet/security/bulletin/ms08-038.mspx MS08-038]. This update corrects the behavior of NoDriveTypeAutoRun on those platforms. Windows 2000, XP, and Server 2003 users should install the update in Microsoft Support Document [http://support.microsoft.com/kb/967715 KB967715]. From that advisory:  With limited testing, it appears to be possible to disable AutoRun and AutoPlay on Microsoft Windows systems by saving the following text as a .REG file and importing it into the registry:    REGEDIT4    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]    @="@SYS:DoesNotExist"This registry value appears to prevent windows from parsing and taking actions based on the Autorun.inf file, which both AutoRun and AutoPlay utilize. Note that Windows can cache AutoRun capabilities of devices via the MountPoints2 registry key, though. So even after disabling AutoRun as described above, Windows may still automatically execute files on devices that Windows has listed in this cache. For this reason, we also recommend removing this cache by deleting the MountPoints2 registry key for each user:    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2&nbsp;== Related == * [[Autorun|Autoplay, Autorun, and Auto-insert notification]]* [[Turn off Autoplay With Group Policy Editor]]* [[Sandisk U3 Flash Drive Virus]]* [[Sony DRM Rootkit]]For Linux Users:* [[How_Do_I:_A_Linux_Q%26A#.5BDISABLE_ANNOYING_KDE_Autorun_WHEN_CDROM_IS_IN_DRIVE_WHEN_KDE_STARTS.5D|KDE Autorun]]
Bureaucrat, administrator
16,192
edits