Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Usb! Worm Targets Removable Memory Sticks


  • Please log in to reply
4 replies to this topic

#1 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,749 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:39 PM

Posted 05 May 2007 - 08:32 AM

...The W32/SillyFD-AA worm hunts for removable drives such as floppy disks and USB memory sticks, and then creates a hidden file called autorun.inf to ensure a copy of the worm is run the next time it is connected to a Windows PC.

It also changes the title of Internet Explorer windows to append the phrase "Hacked by 1BYTE". ...

sophos.com
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

BC AdBot (Login to Remove)

 


#2 rowal5555

rowal5555

    Just enough info to be armed & dangerous...


  • Members
  • 2,644 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:St Kilda, Dunedin. South Island. NZ
  • Local time:09:39 AM

Posted 09 May 2007 - 12:09 AM

It is recommended to disable the autorun feature in Windows to combat this worm. How?????

rowal5555 (Rob )                                                             

Avid supporter of Bleeping Computer's
Team 38444

You can help find a cure


 


#3 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,579 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:39 AM

Posted 09 May 2007 - 01:04 AM

Totally disable Autorun / AutoPlay in Windows XP
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#4 rowal5555

rowal5555

    Just enough info to be armed & dangerous...


  • Members
  • 2,644 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:St Kilda, Dunedin. South Island. NZ
  • Local time:09:39 AM

Posted 09 May 2007 - 01:16 AM

Thanks Budapest. I was running around in circles getting precisely nowhere. Good one.

Cheers

rowal5555 (Rob )                                                             

Avid supporter of Bleeping Computer's
Team 38444

You can help find a cure


 


#5 bloomcounty

bloomcounty

  • Members
  • 672 posts
  • OFFLINE
  •  
  • Local time:01:39 PM

Posted 12 May 2007 - 09:56 AM

In TweakUI, under My Computer --> AutoPlay --> Types, I've removed the checkmarks next to both "CD and DVD drives" and "removable drives".

However, under My Computer --> AutoPlay --> Drives, I still have checkmarks next to C: (main hard drive), D: (restore partition), and E: (cd/dvd drive).

Why would AutoPlay need to be active for your hard drive(s) here?

It sounds like having both the "CD and DVD drives" and "removable drives" unchecked in "Types" supersedes having the cd/dvd drive checked in "Drives", so that's probably covered as is, right?

But I'm uncertain about the hard drives and the settings in "Drives" in general and why they're set the way they are...

Any thoughts? Thanks! :thumbsup:
My stats: Windows XP Home SP2; Firefox 3.0.14 w/ Ad-Block Plus; IE 6.0 (used only for monthly Windows Critical Updates); ZoneAlarm 6.1.744.001 Free; AVG 8.5 A/V Free; SuperAntispyware Free 4.28.1010




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users