Since I’m about to do this to my VMware installation of windows I thought it would be a good time to write a quick blog post on how to prevent your Windows computer from being infected by cds, dvds, and usb drives.
Of course this means that when you pop in a cd/dvd, it will no longer automatically launch some nice little installer application for you – you’ll have to go to "My Computer" and explicitly do that yourself. But you’re better off doing things that way anyways. Trust me!
Last time I was in Uganda (November 2007) I managed to infect my usb drive, and then subsequently infect several laptops and PCs with my drive, when I tried to copy some files from a school computer. Basically some virus copied itself onto my drive, and then when I inserted it into a new computer, the computer automatically ran a special file called "autorun.inf", which launched the virus. There were a couple of variants, including a funny one that made all of my folders hidden, and created a bunch of executable files with the same names as my folders, that had icons that looked like folders. I mistakenly double-clicked on the "folders", and voila – another infection. Insidious little trojan horses… To make a long story short, I ended up spending a lot of time downloading AVG Free Anti-virus and installing it everywhere, since that was the only freely available anti-virus software that was up-to-date enough to remove these worms and viruses.. =)
Now we could have avoided all of these problems, if only execution of autorun.inf were disabled!
There’s a few sets of instructions on the web for how to do that. Most of them just tell you how to do it for cd roms, a few give instructions that will disable it for both cdroms and usb drives:
http://www.tildemark.com/tips/disable-autorun-on-cdrom-or-usb-drives.html
http://www.howtogeek.com/howto/windows/disable-autoplay-of-audio-cds-and-usb-drives/
The general gist of both sets of instructions is as follows:
- Run the Group Policy Editor by typing "gpedit.msc" in the run box ("Start->Run")
- Navigate to Local Computer Policy -> Computer Configuration -> Administrative Template-> System
- Double-clinic "Turn Off Autoplay"
- Select Enabled, and specify that you want to turn off autoplan for "All drives"
- Click OK, Close the Group Policy Editor.
Do it! Do it now!
The other thing you should do, is that anytime you are not actually copying files to your usb drive, and you are just giving files to someone else, make sure to make your usb drive read only (if possible), so if their computer is infected, they can’t infect your usb drive.
I’ve also thought about carrying around a copy of anti-virus software, but I’m feeling dis-enchanted with AVG-Free (it’s bloated, they have started running nagware for their paid services, and it’s not that straightforward to update if you don’t have a direct internet connection). I’ve also OSX-ified myself, so have since stopped paying as much attention to Windows…. But if anyone has recommendations for good, solid, affordable anti-virus software I can give out to people in Africa, I’d be happy to check them out!
Powered by Qumana
