cancel
Showing results for 
Search instead for 
Did you mean: 
chijar
Level 7
Report Inappropriate Content
Message 1 of 7

prevent execute autorun.inf

Jump to solution

Dear all,

i read in mcafee link how can i block or prevent auto execution of autorun.inf. well i configure that in my ePo and then i propagate the policy in my test clients but my cds always execute autorun.inf.

I setup this through two methods:

1. - From access protection / defined users rules / files and folders block / ... (view the attached file)

2.- From the "standard antivirus protection"

but anyhting give the results that i want.

My pc clients are with dat and engine updated. and my another policies run ok.

thanks

Dibujo.JPG

1 Solution

Accepted Solutions

Re: prevent execute autorun.inf

Jump to solution

Hi

This one work for me.

Block autorun.jpg

6 Replies
ajacobs
Level 12
Report Inappropriate Content
Message 2 of 7

Re: prevent execute autorun.inf

Jump to solution

Hi,

I've moved this to the ePO community. Hopefully someone can help you soon.

apoling
Level 14
Report Inappropriate Content
Message 3 of 7

Re: prevent execute autorun.inf

Jump to solution

Hi,

I'm not so sure but I think this rule would not work for every process despite the * in the Include processes field. I would imagine that the SYSTEM process cannot be restricted in this way. Maybe someone else more knowledgeable can confirm (or deny) this with evidence.

To enable/disable execution of autorun.inf files in Windows, read this link, for example: http://autorun.moonvalley.com/enable.htm

Re: prevent execute autorun.inf

Jump to solution

Hi

This one work for me.

Block autorun.jpg

chijar
Level 7
Report Inappropriate Content
Message 5 of 7

Re: prevent execute autorun.inf

Jump to solution

Really thanks for your help. This only execute the CD window when i see the files that CD contains.

Waslow
Level 7
Report Inappropriate Content
Message 6 of 7

Re: prevent execute autorun.inf

Jump to solution

You can use \autorun.inf to block autorun.inf files only on root directories like c:\autorun.inf, etc....

But you can read/write/create autorun.inf files in subfolders like c:\temp\autorun.inf, etc....blockautorun.JPG

Re: prevent execute autorun.inf

Jump to solution

change as "**\autorun.rif",and try it.