Disable AutoRun XP - DS Job and VBscript
Updated: 23 Jul 2009
Several months ago, I decided to improve the security on our desktops. One thing that must be done is disable autorun. If you don't disable autorun, many viruses, Trojans, and worms can be spread - including the conficker virus. Disabling the autorun in the GPO hasn't done it correctly in the past. Windows did some updates to fix that if you disable autorun in the group policies. However, I just add this registry entry to disable autorun entirely. USB flash drives cannot execute the autorun.inf file if you have this registry setting. The txt file needs the extension renamed to .bin. Happy virus hunting.
This is the what is in the bin file (You could also copy and paste the section below to a vbs file and run it on the computer):
'vbscript
Set WshShell = WScript.CreateObject("WScript.Shell")
WshShell.RegWrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf\", "@SYS:DoesNotExist", "REG_SZ"download Filed Under: