lunedì, novembre 09, 2009

USB + autorun.inf = Nada

It seems that the days of automatically launching media from a USB drive are coming to an end. Traditionally you could modify the autorun.inf file in the root directory of your drive:

[autorun]
icon=icon.ico
open=folder/file.html
action=Launch Name
shellexecute=folder/file.html

However, due to people using this nefariously (i.e. spreading viruses and malware) Microsoft is taking this ability away starting with Windows 7. From the MSDN blog:

Windows 7 introduces key changes to AutoPlay that keep you from being exposed inadvertently to malware like Conficker when doing your common scenarios with devices (e.g., get to the files on your USB flash drive, download pictures from an SD card, etc.).

In particular, Windows will no longer display the AutoRun task in the AutoPlay dialog for devices that are not removable optical media (CD/DVD.) because there is no way to identify the origin of these entries. Was it put there by the IHV, a person, or a piece of malware? Removing this AutoRun task will block the current propagation method abused by malware and help customers stay protected. People will still be able to access all of the other AutoPlay tasks that are installed on their computer.