Protection of U disk autorun virus

At present, the U disk virus is very serious situation. Almost all the virus with the U disk, the root directory has a autorun.inf, right-click menu More "AutoPlay", "Open", "Browser" and other items. Because we are accustomed to using a double click to open the disk, but now we double-click, usually not open u disk, but let the program set up in the Autorun.inf automatically play. The virus will not be activated simply by right-clicking on the Open button. But if you have a lot of people, and can not guarantee that they will not double-click on the U disk, it can be used in the following method.

Recruit one, Group Policy turn off Autorun function (suitable for unfamiliar computer)

If you want to disable the AutoPlay feature of Windows XP all at once, follow these steps:

1, click "Start → run", in the Open box, type "Gpedit.msc", click "OK" button, open the Group Policy window;

2, in the left pane under Local Computer Policy, expand Computer configuration → administrative Templates → system, and then in the right pane under the "Settings" heading, double-click "Turn off AutoPlay";

3, click the Settings tab, select the Enabled Check button, and then in the Close AutoPlay box, click All drives, click OK, and finally close the Group Policy window.

Recruit two, the registry closes the Autorun function

On the Start menu, enter regedit in run, open Registry Editor, and expand to Hkey_current_user\software\microsoft\windows\currentversion\policies\ Exploer The primary key, find "NoDriveTypeAutoRun" in the right-hand pane, which determines whether to perform the Autorun function of the CDROM or hard disk.

Double-click "NoDriveTypeAutoRun", in the default state (that is, you do not prohibit the Autorun function), in the pop-up window you can see the "NoDriveTypeAutoRun" default key value is 95,00,00,00, attachment upload the catch map. Where the first value "95" is a hexadecimal value, it is the same as all of the devices that are prohibited from running automatically. Converting "95" to binary is 10010101, where each represents a device, and different devices in Windows are represented by the following values:

Device name the number of device names means the device name meaning with the following values

Dkive_unknown 0101h Unrecognized device type

Drive_no_root_dir 1002h Drive without root (DRIVE without root directory)

drive_removable 2104h removable drive (removable DRIVE)

drive_fixed 3008h Stationary Drive (fixed DRIVE)

Drive_remote 4110h Network Drive (Network DRIVE)

Drive_cdrom 5020h Optical Drive (CD-ROM)

Drive_ramdisk 6040h RAM diskette (RAM disk)

Keep 7180h unspecified drive type

The value "0" in the table listed above indicates that the device is running, and the value "1" indicates that the device is not running (Windows prohibits 80h, 10h, 4h, 01h, by default, these devices run automatically, and these values add up to hexadecimal 95h, so NoDriveTypeAutoRun The default key value is 95,00,00,00.