On Friday, Microsoft pushed updates for Windows operating systems that disables the AutoRun feature for non-optical devices. This update affected Windows XP, Vista, Server 2003, and 2008. Microsoft already disables the feature in the, soon to be available, Windows 7 OS. The update was available voluntarily back in August.
AutoRun (and AutoPlay) was originally developed out of convenience to eliminate the need for users to browse the media for the correct file to open. However, recently it has been exploited to automatically run malware and other obtrusive software applications without the users consent.
Interestingly, the update doesn’t cripple removable optical media (i.e. CDs and DVDs) from running AutoRun procedures. So companies, such as U3, who manufacture their devices to represent themselves as CDs are largely unaffected by the update.
Links:
[1] http://www.maximumpc.com/user/jcbarry
[2] http://www.maximumpc.com/article/news/microsoft_blocks_autorunautoplay_vulnerability_xp_vista_and_windows_server
[3] http://www.maximumpc.com/article/news/microsoft_blocks_autorunautoplay_vulnerability_xp_vista_and_windows_server_updated
[4] http://www.maximumpc.com/article/news/redmond_reins_autorun_autoplay_help_make_windows_more_secure
[5] http://www.maximumpc.com/article/ask_doctor/ask_doctor_no_way_autoplay
[6] http://www.maximumpc.com/tags/autorun
[7] http://www.maximumpc.com/tags/security
[8] http://www.maximumpc.com/tags/software
[9] http://www.maximumpc.com/tags/software_news
[10] http://www.maximumpc.com/tags/windows
[11] http://www.maximumpc.com/tags/windows_updates
[12] http://www.maximumpc.com/articles/news
[13] http://www.maximumpc.com/user/login?&commentfragment=comments_top_anchor
Print