Menu

Blocking specific files in Autoplay Drives

When AutoPlay is activated n our Data CD/DVD or flash drives inserted, Windows will execute an Applications which is configured in autorun.inf.
Mostly all viruses travels from autorun to system directory or drive

Here i will tell you how to block specific files from autoplay instead of Disabling Autoplay system.
Settings:
  1. Run > regedit
  2. Go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\CancelAutoplay\Files
  3.  Add New String value and name it with application name which you want to block. E.g.- Some bad coders use shell32.exe (system contains shell32.dll, see the difference between .exe n .dll) to execute virus from autorun.inf
  4. (Note:- shell32.exe, run32.exe, ntdetect1.exe these used to run virus cause system contains this named dll) so to block shell32.exe from autorun i'll add new string value - name 'shell32.exe' to block any other applications which contains 32.exe, so ill add '*32.exe'
  5. You can block any file formats, e.g- vb scripts like 'killtask.vbs' or you can set '*fun*' something like for blocking fun.exe
  6. read by default string names to better understand..
Cheers..)

No comments:

Post a Comment