Guest Francisco Gomez Posted September 25, 2008 Posted September 25, 2008 Does really pressing 'shift' when inserting a pendrive prevent being infected from it? I suppose that it prevents executing 'autorun.inf' and other autoplay options... So the virus, usually contained in an "exe" or another executable launched during autoplay, is stopped. Then, you can manually delete it (using shell window you can change attribs and remove those system / read-only files) I don't know if are there boot serctor viruses active that could hide in a pendrive. A different matter is how a pendrive will get infected from an infected system. When does it hapen? When inserting? While reading pendrive? Only when writing? Thank you! Quote
Guest Mantas MikulÄ—nas Posted September 25, 2008 Posted September 25, 2008 Francisco Gomez wrote:<span style="color:blue"> > Does really pressing 'shift' when inserting a pendrive prevent being infected > from it?</span> No. <span style="color:blue"> > I suppose that it prevents executing 'autorun.inf' and other autoplay > options... So the virus, usually contained in an "exe" or another executable > launched during autoplay, is stopped. Then, you can manually delete it (using > shell window you can change attribs and remove those system / read-only files)</span> First, AutoRun and AutoPlay are separate things. AutoRun executes the autorun.inf file. AutoPlay just scans the disk for pictures/music/movies/stuff. Second, at least in Windows XP, autorun.inf's on pendrives aren't executed automatically - you still get the autoplay's "choose action" screen. So even if you don't hold Shift, nothing will be automatically launched from a pendrive. <span style="color:blue"> > I don't know if are there boot serctor viruses active that could hide in a > pendrive.</span> A pendrive isn't that different from a hard disk - it has boot sector, it can have partitions, etc. But the boot sector is only executed when you boot the system from the drive. -- Mantas MikulÄ—nas <email = base64.decode("Z3Jhd2l0eUBjbHVlbmV0Lm9yZyA=")> PGP/GPG: 0xCA07F3A91C9F7C03 <http://rootshell.be/~grawity/> ASCII ribbon - against HTML email <http://www.asciiribbon.org> Quote
Guest Francisco Gomez Posted September 26, 2008 Posted September 26, 2008 So... Is there any way to prevent executing autorun.inf in a pendrive when inserted? "Mantas MikulÄ—nas" wrote: <span style="color:blue"> > Francisco Gomez wrote:<span style="color:green"> > > Does really pressing 'shift' when inserting a pendrive prevent being infected > > from it?</span> > > No. > <span style="color:green"> > > I suppose that it prevents executing 'autorun.inf' and other autoplay > > options... So the virus, usually contained in an "exe" or another executable > > launched during autoplay, is stopped. Then, you can manually delete it (using > > shell window you can change attribs and remove those system / read-only files)</span> > > First, AutoRun and AutoPlay are separate things. AutoRun executes the > autorun.inf file. AutoPlay just scans the disk for > pictures/music/movies/stuff. > > Second, at least in Windows XP, autorun.inf's on pendrives aren't > executed automatically - you still get the autoplay's "choose action" > screen. So even if you don't hold Shift, nothing will be automatically > launched from a pendrive. > <span style="color:green"> > > I don't know if are there boot serctor viruses active that could hide in a > > pendrive.</span> > > A pendrive isn't that different from a hard disk - it has boot sector, > it can have partitions, etc. But the boot sector is only executed when > you boot the system from the drive. > > > -- > Mantas MikulÄ—nas <email = base64.decode("Z3Jhd2l0eUBjbHVlbmV0Lm9yZyA=")> > PGP/GPG: 0xCA07F3A91C9F7C03 <http://rootshell.be/~grawity/> > ASCII ribbon - against HTML email <http://www.asciiribbon.org> > </span> Quote
Guest Max Wachtel Posted September 27, 2008 Posted September 27, 2008 In news:5FF35864-8DE8-4090-A20D-A9A8E85B7F28@microsoft.com, Francisco Gomez <FranciscoGomez@discussions.microsoft.com> after much thought, came up with this jewel:<span style="color:blue"> > Does really pressing 'shift' when inserting a pendrive prevent being > infected from it? > > I suppose that it prevents executing 'autorun.inf' and other autoplay > options... So the virus, usually contained in an "exe" or another > executable launched during autoplay, is stopped. Then, you can > manually delete it (using shell window you can change attribs and > remove those system / read-only files) > > I don't know if are there boot serctor viruses active that could hide > in a pendrive. > > A different matter is how a pendrive will get infected from an > infected system. When does it hapen? When inserting? While reading > pendrive? Only when writing? > > Thank you!</span> Here is some light reading http://pandu.poluan.info/blog/itguy-en.php...flash-disk-from Here is a program that does it for you- http://www.softpedia.com/get/Antivirus/Ninja-Pendisk.shtml -- Virus Removal http://max.shplink.com/removal.html Keep Clean http://max.shplink.com/keepingclean.html Change nomail.afraid.org to gmail.com to reply to me by email. nomail.afraid.org is setup for use in USENET-feel free to use it Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.