<<<
Tuesday, February 15, 2011
>>>
 
News of AutoRun's Death Has Been Greatly Exaggerated Posted by Sean @ 13:56 GMT

Last week, I applied Microsoft Updates to one my Windows XP test machines and noted an optional update which restricts "AutoRun entries in the AutoPlay dialog to only CD and DVD drives".

Update for Windows XP (KB971029)

You can see from the image above that the update is optional.

Yet, a Microsoft blog post about the update called it an "important, non-security update".

Important updates are automatically applied by Microsoft Updates.

And so there was much rejoicing and AutoRun was declared dead.

But not so fast!

Larry Seltzer's technically accurate (based on Microsoft's statement) story about trimming AutoRun was followed up by another story with a correction from Microsoft.

"The functionality change to Autorun is, for the moment, marked as Optional for Windows XP. Users who have automatic updates set to install both Optional and Important updates have already begun to receive the update. We plan over the next few weeks to re-set the change to Important, allowing it to reach the remainder of the Automatic Update-using XP community."

"Microsoft says that this was a miscommunication and not a mistake."

And so AutoRun lives on, and even after Microsoft adjusts the update from optional to important for Windows XP, update KB971029 only limits non-optical media functionality.

So… to limit AutoRun, manually run Microsoft Updates. To completely kill AutoRun, click here and use the "fix it for me" option.

Regards,
Sean






<<< Stuxnet, Once Again
|
Trojan:Android/Adrd.A >>>