Microsoft has begun offering users of Windows XP and Vista an optional update that disables AutoRun devices USB storage. This is a file that is installed on those devices called autorun.inf, and is designed so that when connected to any computer, ensures the browser will automatically open and launch autorun file. The AutoRun feature has been a method used by malware to infect computers by modifying the file autorun.inf to spread through all devices (hard drives and other USB flash drives), and worst of all, spread to all computers connected to the network.
Conficker is a worm that spread widely in early 2009 and is the worm Stuxnet analysts suspect that was developed to sabotage Iran's nuclear programs. Both used AutoRun to infect millions of PCs worldwide. Microsoft has stated that the delay of more than a year and a half to start the update on Windows Update AutoRun has been to give legitimate software vendors used this feature enough time to redesign their programs. Most of them have gone to the U3 specification, a standard backed by SanDisk to automatically launch software from USB devices.
Therefore, now available from Windows Update to download the update that disables the functionality. It is noteworthy that the AutoPlay still present in the optical media (CDs, DVDs ,...), basically because Microsoft has not seen potential malware in them and is very unlikely to appear by their nature read-only. Finally, users of Windows 7 should not worry about updating, because the autorun is disabled by default.
0 comments:
Post a Comment