From: Maxwell Lol on
Stan Bischof <stan(a)newserve.worldbadminton.com> writes:

>
> If you are running as admin in Windows _and_ have autorun
> up and running, you get exactly what you deserve!
>
> Stan

This is what I had in my registry.

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDriveTypeAutoRun"=dword:000000ff

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDriveTypeAutoRun"=dword:000000ff

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDriveTypeAutoRun"=dword:000000ff

And still a driver was installed.

From: Pascal Hambourg on
Hello,

Maxwell Lol a �crit :
>
> I've played with various U3 hacking toolkits. I have disabled any sort
> of automatic action when examining USB drives. Or so I thought.
>
> Just last night I plugged in a USB drive on my Windows XP box.
>
> Next thing I know it said it had installed a driver and I have to reboot my
> laptop! Grrr. And it wasn't even a U3 USB drive.

AFAIK, this is the usual Windows behaviour (except the reboot
requirement) when a "new" mass storage device is connected to a USB port
it was never connected to before, and has nothing to do with autorun.
However I do not really know what it means, because obviously the USB
mass storage driver is part of Windows and already installed. I guess it
is some kind of registration of the device.
From: David W. Hodgins on
On Wed, 20 Jan 2010 16:42:11 -0500, Maxwell Lol <nospam(a)com.invalid> wrote:

> And still a driver was installed.

OT for linux, but see ...
http://www.us-cert.gov/cas/techalerts/TA09-020A.html

Regards, Dave Hodgins

--
Change nomail.afraid.org to ody.ca to reply by email.
(nomail.afraid.org has been set up specifically for
use in usenet. Feel free to use it yourself.)
From: Maxwell Lol on
"David W. Hodgins" <dwhodgins(a)nomail.afraid.org> writes:

> On Wed, 20 Jan 2010 16:42:11 -0500, Maxwell Lol <nospam(a)com.invalid> wrote:
>
>> And still a driver was installed.
>
> OT for linux, but see ...
> http://www.us-cert.gov/cas/techalerts/TA09-020A.html

Thanks. I'm not a Windows IT guy. I appreciate this.