Sunday, July 27, 2008

Tip#2 - Prevent USB drive infection

First let’s look at how these viruses work. All Trojans needs a trigger to activate it. In this case, its the autorun function in Windows.

Ok now we look at how we could prevent you form spreading to others.

Step 1: Remove the current "autorun.inf"(only if the drive is infected) link
Step 2: Create a new folder, named “AUTORUN.INF”
Step 3: You are done, if the folder disappears, means the drive is infected.You will need to remove it here

Tip1.1

Q: How it works
A: In order to reduce the spread we must deactivate the trigger or replace the trigger, Autorun.inf.

Q: Why do we use a folder instead of a file?
A: For some odd reason, if you use windows API and replace it, it doesn't work. This is also the same when you use command prompt to copy the folder. This will prevent some variants from infecting the usb drive.

No comments: