USB Viruses take off in Spam, Scam and Phishbusters

Re: USB Viruses take off

Fri, 12 Sep 2008 19:14:36 EDT

said by moike :

Vista adds a notification to the user before blindly running whatever is on a USB drive. XP is more challenging. Disable AutoRun. You'll put up with endless nagging from iTunes about the disabled AutoRun state, but it beats getting a virus.

Good reason to not use iTunes. One of my first actions on a new install is to disable autorun. (Right up there with changing default folder view to details, showing hidden files, not hiding extensions for known file types, not hiding system files, and showing the contents of system folders.)

Re: USB Viruses take off

Mon, 01 Sep 2008 20:31:30 EDT

Doctor Four : In one case, "take off" is literal: that being the password
stealing worm that infected laptops aboard the International
Space Station. It first got onto an astronaut's USB memory
stick.
--
"The trouble with computers, of course, is that they are very sophisticated idiots." - Doctor Who (from Robot)

Re: USB Viruses take off

Mon, 01 Sep 2008 15:24:17 EDT

fireflier : .

Re: USB Viruses take off

Thu, 28 Aug 2008 14:58:28 EDT

nwrickert : Take a look at this thread:
»Disabling 'Autorun' on USB and beyond. Need help.
--
AT&T dsl; Westell 327w modem/router; openSuSE 11.0; firefox 3.0.1

USB Viruses take off

Thu, 28 Aug 2008 11:09:10 EDT

moike : I'm surprised that USB viruses haven't spread faster than they have to date.

»garwarner.blogspot.com/2008/08/l···ool.html

...
While many viruses spread via email or by visiting infected webpages, this network spreads by network connections and via "USB Thumb Drives".

When a USB drive is inserted into a computer, the computer scans the drive for an "AutoRun.inf" file. If the AutoRun.inf file is present, the computer does whatever it is told to do.

If a stranger (or a student, in this case) gives you a USB thumb drive and you stick it into the computer, the default setting on any Windows computer is to execute that AutoRun sequence.

The way this family of viruses, which we call "USB Jumpers", works is that they modify the AutoRun.inf file to execute a copy of the virus, which is often present on the thumbdrive as a "hidden file" called "Setup.exe".

...

Of particular interest is the auto-run .PIF virus:

if the drive contains a ".pif" extension, there is further danger. Browsing a folder containing a ".pif" from Active Desktop (the default in Windows XP) is enough to invoke the virus.

Vista adds a notification to the user before blindly running whatever is on a USB drive. XP is more challenging. Disable AutoRun. You'll put up with endless nagging from iTunes about the disabled AutoRun state, but it beats getting a virus. Don't just trust the directions to disable Autorun ... test it. I use this harmless but startling file here ... named autorun.inf on the root directory of a USB drive:

[AutoRun]
Open= cmd.exe /k color 4e && echo Gotcha!
shell\Open\command= cmd.exe /k for /l %%a in (1,1,9) do start cmd.exe /k color %%ae ^&^& p rompt Gotcha!