search cancel

Disable Autorun.inf to be triggered by Windows OS

book

Article ID: 151675

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

Customer wants to disable Autorun.inf from being triggered by Windows OS because it is commonly used by malwares as its propagation vector

Symptoms
Plug in a USB drive and virus spreads with autorun.inf now showing on their drive root folder [C:\ or D:\ etc]
  • Double click on a drive , and it then give error : " Windows Script Host Can not find script file .vbs" or "Unable to find .exe file"

Cause

Microsoft Windows OS has AutoRun feature to provide convenience for its user which is used by malware as their propagation method

Resolution

A Registry modification ::

Step 1.
Start Notepad or another text editor.

Step 2. Copy the following text from this page and paste it into your text editor (everything between the square brackets should be all on one line):

REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]
@="@SYS:DoesNotExist"


Step 3.
Save the file with a name like NoAutoRun.reg, taking care to include the .reg extension.

Step 4. Right-click your .reg file and choose Merge. Confirm any warning prompts to add the information to the Registry.