USB Autorun Protection

[Couposn]

Hello,

I recently scanned a customers memory pen he had an autorun virus on there and 70+ other viruses, Malwarebytes didn't stop the autorun from executing, perhaps this could be a premium feature?

[exile360]

Thanks for the suggestion, I'll pass it on to the developers

[LDTate]

Need a tool to stop that?

Download this file

http://download.bleepingcomputer.com/sUBs/...Disinfector.exe

For all of your USB or external drives:

Open the drive.

Click the Tools menu, and then click Folder Options.

Click the View tab.

Uncheck "Hide file extensions for known file types."

Under the "Hidden files" folder, select "Show hidden files and folders."

Uncheck "Hide protected operating system files."

Click Apply, and then click OK.

Look for the file autorun.inf and delete it if found.

Also look for a Folder that's named resycled, make sure of the spelling and delete the folder if found. DO NOT delete the Recycler folder.

Now run the Flash_Disinfector.exe.

Be sure to insert any flash drives or USB devices that you use.

Do this for every USB / external drives:

Once finshed:

Double-click My Computer.

Click the Tools menu, and then click Folder Options.

Click the View tab.

Check "Hide file extensions for known file types."

Under the "Hidden files" folder, Uncheck "Show hidden files and folders."

Check "Hide protected operating system files."

Click Apply, and then click OK.

[mountaintree16]

I had suggested something similar a while back too

http://forums.malwarebytes.org/index.php?s...st&p=323435

[LDTate]

You can run into issues when autorun is removed. Combofix also removes autorun and some OP's want it back.

When they insert their CD or whatever, they want it to autorun / autoplay.

When you're working one on one with the OP it isn't that big of an issue but if MBAM removes it I think you'll have alot of unhappy users of MBAM

I guess that was one of the reason's the bad guys infected autorun.

[Haider]

Hello Couposn:

Please check my responses for a similar query, hope you'd find them helpful:

http://forums.malwarebytes.org/index.php?s...st&p=346725

http://forums.malwarebytes.org/index.php?s...st&p=347320