tsue Posted September 9, 2009 Share Posted September 9, 2009 hello, im tired of the file autorun.inf from the usb memories wich a virus use to infect windows, i want to create a program that runs in the back that detects new usb or hard drives drives when inserted, but i dont know how to make something that yust tells the program wich drives are connected except for the disc/dvd drive so then i can use if autorun.ini exists then del autorun.ini Link to comment Share on other sites More sharing options...
omikron48 Posted September 9, 2009 Share Posted September 9, 2009 (edited) Can't do that. It would be too late by the time you plugin your removable drive. autorun.if is executed the moment removable media is plugged in. Even if you delete it, it would be too late. You can disable autorun for removable drives on your machine. The removable drive can still get infected and infect other comps, but it won't automatically infect yours. There's a switch you need to change in the registry for that. Info is on wikipedia. Edit: If you have a good anti-virus, all those autorun viruses on flash drives won't harm you. It should get trapped the moment you stick the drive in. The only annoying thing is having to run scan everytime yo plug something in. Edited September 9, 2009 by omikron48 Link to comment Share on other sites More sharing options...
tsue Posted September 9, 2009 Author Share Posted September 9, 2009 Can't do that.It would be too late by the time you plugin your removable drive. autorun.if is executed the moment removable media is plugged in. Even if you delete it, it would be too late.You can disable autorun for removable drives on your machine. The removable drive can still get infected and infect other comps, but it won't automatically infect yours. There's a switch you need to change in the registry for that. Info is on wikipedia.yea i know about that switch and that it wont automatically infect my computer, i already have it activated, when i get infected is when i double click in the usb drive, thats why the program can detect the autorun and delete it before it gets activated by opening the usb drive, or am i missing something Link to comment Share on other sites More sharing options...
ctl3d32 Posted September 9, 2009 Share Posted September 9, 2009 What you want is here: Panda USB Vaccine Link to comment Share on other sites More sharing options...
tsue Posted September 9, 2009 Author Share Posted September 9, 2009 What you want is here: Panda USB Vaccinehi, thanks for the answer, but it doesnt make it automatically, what panda does is to remove the autorun the problem is that im not the only one that use my computer wand i cant tell everyone to do a panda scan before opening the usb, besides i can avoid autorun activating by rightcliking then explore than delete the virus.thats why i need to make a program that automatically deletes them Link to comment Share on other sites More sharing options...
rajeshontheweb Posted September 9, 2009 Share Posted September 9, 2009 oooh, i didnt realise u guys could miss this , check out autorun eater, ikill, ninja pendisk , etc. i could list these just off my mind because i started off with such a project and more or less what i wanted to do had been done already by autorun eater project. nevertheless, if u browse through the forums, u will find you can monitor disk insertion / removal using both wmi and windows api i had successfully come to the monitoring level and as far as i have tried i have been able to delete a few autorun.inf files before they get executed. it is true that panda usb vaccine and flashy disinfector, etc offer you services that only immune your pc by disabling autorun and dont monitor autorun activity. so the first few projects would be of help to you. i have been using autoruneater constantly because what ever i had planned to do, i had progressed more than half way and almost before finalising it , i stumbled upon this project and was impresssed to see almost over 75% of my needs fulfilled ... Started late is much better than having never started it!!!!Failure is another step towards success. I've been messing around with: Adding Entry to 'Hosts'File Information Lister (Logger)Yet Another AutoIT Error Handler Yet Another AutoIT Error Handler & Debugger Control your App's TaskBar Button YCurrency Ticker (Latest Release : 16 Apr 2009)_WinInetInternetCheckConnection UDF Symantec Definitions Lister UDF _GetLocalIPAddresses UDF UDF to get Special Folder Information WMI_NetworkAdapterConfiguration2Array WMI_CDRomDriveCapabilities _ScriptExists - Check if your au3 script is running!! Uninstaller UDF Get Version for your application (at script level or compiled stage) Uninstaller Pro - faster alternative to windows application removal applet Link to comment Share on other sites More sharing options...
omikron48 Posted September 9, 2009 Share Posted September 9, 2009 (edited) Personally, I just make it so that viruses can't create an autorun.inf on my flash drive. But I can't do the same to drives I haven't handled before they got infected so my anti-virs takes care of that. Edited September 9, 2009 by omikron48 Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now