About the ban on U disk (Mobile hard drive) automatic playback test

I have always recommended the use of Group Policy to turn off AutoPlay, today in the forum to see a skeptical post, the post tried to explain a point of view-to avoid double-clicking or inserting a U disk (Mobile hard drive) poisoning methods, only by the Group Policy Editor is not valid. The relevant registry key value needs to be modified.

I was careful to do a 20-minute test. Test results show that the automatic playback of all drives in the Group Policy Editor is the easiest and most effective way to prevent the virus from double-clicking or inserting a mobile media. Three years of customer service experience, I do not agree with technology first. My idea is the simplest, easiest to implement the program, is the most needs of customers.

The test uses a simple autorun.inf, the content of which is

[Autorun]

Open=explorer. Exe

Shellopen= Open (&o)

Shellopencommand=explorer. Exe

Shellopendefault=1

Shellexplore= Resource Manager (&X)

Shellexplorecommand=explorer. Exe

To make the test phenomenon more intuitive, I copied the Notepad.exe to the U disk, renamed to Explorer.exe.

Run, Gpedit.msc, in the Computer Configuration, admin template, System, right turn off AutoPlay double-click, select Not configured (after I install the system, will usually immediately modify this value for all drives), for this test, I change back. Reboot the computer for the configuration to take effect.

Then, double-click My Computer, and then double-click the U disk icon, Notepad opened. mount a Windows XP ISO disc image again. Double-click to eject the interface for installing Windows XP.

Continue to the next step, rerun Gpedit.msc, change the Disable AutoPlay value to all drives, and restart the computer.

Double-click on My Computer, double-click the U disk, double-click the disc, did not start the appropriate program, but in the current window shows the root directory files.

This experiment shows that the most simple and effective way to prevent viruses from creating autorun.inf in Mobile media, or to use Group Policy to modify the computer Configuration-> management templates-> disable AutoPlay and restart the computer.

It is not recommended to complicate simple issues, in a word, "simple, rough, effective."