Thread: AutoRun Security fix
2009-03-09, 08:33 #1
- Join Date
- Jan 2001
- West Long Branch, New Jersey, USA
- Thanked 0 Times in 0 Posts
The March 5 edition of Windows Secrets described a security problem associated with the AutoRun feature. It referred to a fix in MSKB 967715. I had already installed the fix from Windows Update a few weeks ago. However, I decided to check the registry key mentioned in the article.
HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer
The article goes on to indicate "In the right pane, double-click NoDriveTypeAutoRun, enter 0xFF in the "Value data" field, make sure Hexadecimal is selected under Base, click OK, and exit the Registry Editor."
However, I did NOT find this key in my registry. In addition to (Default), the only other key was HonorAutoRunSetting with a value of 0x00000001.
As a test, I took out and then reinserted my Thumb Drive. Up popped the AutoPlay (not AutoRun) window. The Windows Secrets article did mention a difference between the two, although this was not very clear.
Any ideas on what's going on?
PS: Is the new Lounge operational? I haven't received any email lately. I tried to check my Board subscriptions but didn't see anything - no list.
Subscribe to our Windows Secrets Newsletter - It's Free!
Get our unique weekly Newsletter with tips and techniques, how to's and critical updates on Windows 7, Windows 8, Windows XP, Firefox, Internet Explorer, Google, etc. Join our 480,000 subscribers!
+ Get this BONUS — free!
Get the most of Excel! Learn about new features, basics of creating a new spreadsheet and using the infamous Ribbon in the first chapter of Excel 2013: The Missing Manual - Subscribe and download Chapter 1 for free!
2009-03-09, 08:49 #2
- Join Date
- Mar 2002
- Thanked 16 Times in 16 Posts
[quote name='fburg' post='764356' date='09-Mar-2009 14:33']PS: Is the new Lounge operational? I haven't received any email lately. I tried to check my Board subscriptions but didn't see anything - no list.[/quote]
Please ask questions about the Lounge in Lounge Matters. Thank you.
2009-03-09, 08:49 #3
- Join Date
- Mar 2001
- St Louis, Missouri, USA
- Thanked 595 Times in 532 Posts
[quote name='fburg' post='764356' date='09-Mar-2009 08:33'][/quote]
It is not unusual for a registry key to not be present. That is the same as having the key set with a value of zero. That state (i.e. no key) could be a function of the version of XP or an OEM configuration setting. The How to correct "disable Autorun registry key" enforcement in Windows article states that the HonorAutorunSetting is the only value created by the patch. So, if the NoDriveTypeAutoRun did not exist it would not be created. You can create it and set it to the value you need.
2009-03-09, 13:58 #4
- Join Date
- Feb 2008
- A cultural area in SW England
- Thanked 108 Times in 102 Posts
[quote name='fburg' post='764356' date='09-Mar-2009 13:33']However, I did NOT find this key in my registry. In addition to (Default), the only other key was HonorAutoRunSetting with a value of 0x00000001.[/quote]
That's exactly what I found on the 25-odd PCs at work, so I just wrote a REG ADD command in a BATch file to add the required value on each PC and set the REG_DWORD to 0xFF.
(At home I found I had probably played with this months ago, since it was a REG_BINARY field!)
The line I used (note that this is ALL on one line, and may show wrapped) was:Code:
reg add "\\%pcname%\HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0xFF /fBATcher
If it wasn't for the weather, Great Britain would be a silent nation.