The configuration settings that are described in this article give Administrators the ability to selectively or completely disable all Autorun capabilities for systems that run Windows , Windows XP, Windows Server , Windows Vista, and Windows Server systems.
The default behavior in Windows Vista and Windows Server is to prompt the user whether an Autorun command is to be run. Changes to these settings are described later in this article. An Administrator can completely disable Autorun commands or revert to the pre-Windows Vista behavior of automatically executing the Autorun command.
If the feature is configured to disable Autorun capabilities, or if this policy is not configured, Windows Vista and Windows Server will continue to prompt the user whether the Autorun command is to be run. Windows Vista-based and Windows Server based systems must have update Security bulletin MS installed to take advantage of the registry key settings that disable Autorun. Click Start , type Gpedit. If you are prompted for an administrator password or for confirmation, type the password, or click Allow.
In the Details pane, double-click Turn off Autoplay. Click Enabled , and then select All drives in the Turn off Autoplay box to disable Autorun on all drives. Click Enabled , and then select Do not execute any autorun commands in the Default Autorun behavior box to disable Autorun on all drives.
Click Start , click Run , type Gpedit. In the Settings pane, right-click Turn off Autoplay , and then click Properties. Note In Windows , the policy setting is named Disable Autoplay. ImportantThis section, method, or task contains steps that tell you how to modify the registry.
However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully.
For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs.
For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:.
In the Value data box, type 0xFF to disable all types of drives. Or, to selectively disable specific drives, use a different value as described in the "How to selectively disable specific Autorun features" section. To selectively disable specific Autorun features, you must change the NoDriveTypeAutoRun entry in one of the following registry key subkeys:.
The value of the NoDriveTypeAutoRun registry entry determines which drive or drives the Autorun functionality will be disabled for. For example, if you want to disable Autorun for network drives only, you must set the value of NoDriveTypeAutoRun registry entry to 0x If you want to disable Autorun for multiple drives, you must add the corresponding hexadecimal values to the 0x10 value. For example, if you want to disable Autorun for removable drives and for network drives, you must add 0x4 and 0x10, which is the mathematical addition of 2 hexadecimal values, to determine the value to use.
These default values are listed in the following table. All the fixes in the current update for Windows XP and for Windows Server are included in the HonorAutorunSetting registry entry in the following subkey:. Note For Windows Server and Windows XP, all changes of this update are controlled by the HonorAutorunSetting registry entry so that you can revert to the previous configuration if it is required.
The registry key has a default value of 0x1. This value enables the functionality that is present in the current update. Before you install the current update, this registry key is not present in the system. You can obtain prepackage installation Autorun behavior by manually setting the registry key to 0. Microsoft uses these terms to mean different things at different times. Autorun was introduced back in Windows 95 and the living embodiment of it, is a configuration file in the root directory of removable media CDs, USB flash drives, external hard drives, etc.
If you've ever inserted a CD into a Windows computer and had a program run automatically, autorun was behind it. My first posting on this subject offered a sample autorun.
Autoplay was introduced with Windows XP. Whereas autorun literally ran a program automatically, Autoplay puts the computer user in charge. A sample Autoplay window is shown below, no doubt you've seen it many times. When Autoplay is enabled, Windows examines a newly inserted thingy removable media and offers a choice of programs to process the various types of files it finds. Autoplay looks for an autorun. As we saw in my initial posting , the first Autoplay option can be controlled by directives in the autorun.
However, Autoplay does not need or depend on the autorun. Autoplay was a misnomer from the get-go, the only thing that happens automatically is the presentation of the Autoplay window. A better name would have been AutoDetect as the automatic processing is limited to detecting file types. No playing happens automatically. There are two approaches to defending your computer from the Autorun and Autoplay tricks that I described in my first posting on the subject.
One approach, offered by Microsoft which invented the problem in the first place is to disable stuff. Life is too short. Fortunately, two lone techies, Nick Brown and Emin Atac came up with a better solution that directly targets the source of the problem, the autorun. It deals with the disease rather than the symptoms. In fact, if you employ this solution, you can leave Autoplay as defined above enabled and let it, perhaps, serve a useful function.
It can work, but, only if you twist like a pretzel when the moon is shining on a Tuesday. And, it is not a comprehensive fix , loopholes, such as U3 devices remain open. He was referring to two variations of the Microsoft approach. What Mr. It uses the latest technologies to constantly detect and remove new viruses that are infecting computers today. Rather, it will only activate once you open the software and configure it to scan.
Specifically made for flash drives, Panda USB Vaccine targets autorun files and removes it immediately from your trusty flash drives. It will block autorun files and prevent it from being read, created, deleted, or modified. Panda USB Vaccine is a free tool and is also considered the best antivirus to remove autorun virus in flash drives.
Flash drives are very prone to viruses especially if you insert it into multiple computers all the time. USB Disk Security offers virus detection , removal, and repair options. Once you install it, it will automatically search for autorun files and other viruses that could be infecting your flash drives. It works very efficiently because it removes the virus even before the virus can access the computer. Another one of my favorites and the best autorun antivirus remover, Ninja Pendisk also protects your drives from being infected by worm viruses.
It automatically blocks any virus and Trojan once you insert an infected flash drive into your computer. It also prevents the virus from duplicating itself if you accidentally click the autorun file. Ninja Pendisk is free to download and use by everybody, making it one of the best antivirus for autorun.
As a passionate writer and the greatest geek on the team, I focus on the more technical articles of this site. And my goal is to share not only informative but also comprehensible contributions with our readers. Microsoft Defender Offline is an anti-malware tool that helps remove difficult to eliminate viruses that start before Windows starts. Starting with Windows 10, Microsoft Defender Offline is built-in. Click Download the 32 bit version or Download the 64 bit version , depending on which operating system that you are running.
If you're unsure of which operating system that you are running, see Is my PC running the bit or bit version of Windows. When you are prompted, press a key to select an option to use to start your computer, such as F12, F5, or F8, depending on the kind of computer that you are using.
Use the arrow key to scroll to the drive where you installed Microsoft Defender Offline file. Microsoft Defender Offline starts and immediately scans for malware.
Confirm that the Windows firewall is turned on. See Turn Microsoft Defender Firewall on or off for instructions on how to do that on modern versions of Windows. In the Search box, type firewall, and then click Windows Firewall. In the left pane, click Turn Windows Firewall on or off you may be prompted to enter your administrator password. Only download programs from sites that you trust. If you're not sure whether to trust a program that you want to download, enter the name of the program into your favorite search engine to see whether anyone else has reported that it contains spyware.
Read all security warnings, license agreements, and privacy statements that are associated with any software that you download. Never click "Agree" or "OK" to close a window that you suspect might be spyware. Be wary of popular "free" music and movie file-sharing programs, and make sure that you understand all the software packaged with those programs.
Use a standard user account instead of an administrator account. An administrator account can access anything on the system, and any malware run with an administrator account can use the administrator permissions to potentially infect or damage any files on the system. For more information about how to protect a computer against viruses, see Protect my PC from viruses. Want to chat with a live person? Our Answer Tech trained professionals are ready to help: Answer Desk.
Security information and training. For computer virus and security-related support for locations outside North America, go to the Microsoft Support website.
This computer is infected by spyware and adware. Click Start , and then type Windows Update in the search box. In the results area, click Windows Update. Click Check for Updates. Follow the instructions to download and install the latest Windows Updates.
Restart your computer.
0コメント