Turn off HDD autorun function to prevent hackers

Turning off the hard drive Autorun function is one of the effective ways to prevent hackers from invading. The purpose of this article is to open the puzzle of hard disk Autorun function and the way to turn off the function.

On the Start menu, enter regedit in run, open Registry Editor, and expand to hkey_current_user\software\ Microsoft\windows\currentversion\policies\exploer The primary key, find "NoDriveTypeAutoRun" in the right pane, This is the key that determines whether to perform CDROM or hard disk autorun functions.

Double-click "NoDriveTypeAutoRun", by default (that is, you have not banned Autorun function), you can see in the pop-up window "NoDriveTypeAutoRun" Default key value is 95,00,00,00. The first value, "95", is a 16-in value, which is the same as all of the devices that are prohibited from running automatically. Converting "95" to binary is 1001 01 01, where each

A bit represents a device, and different devices in Windows are represented by the following values:

Device name the number of device names means the device name meaning with the following values

Dkive_unknown 0101h Unrecognized device type

Drive_no_root_dir 1002h Drive without root (DRIVE without root directory)

drive_removable2104h removable drive (removable DRIVE)

drive_fixed3008h Fixed Drive (DRIVE)

Drive_remote 4110h Network Drive (Network DRIVE)

drive_cdrom5020h Optical Drive (CD-ROM)

Drive_ramdisk 6040h RAM diskette (RAM disk) retains 7180h unspecified drive type (not yet specified DRIVE disk)

The value "0" in the table listed above indicates that the device is running, and a value of "1" indicates that the device is not running (Windows prohibits 80h, 10h, 4h, 01h, by default, these devices run automatically, and these values add up to just 16 95h, so NoDriveTypeAutoRun "The default key value is 95,00,00,0 0."

It is easy to see from the above analysis that, by default, the devices that will automatically run are Drive_no_root_dir, drive_fixed, Drive_cdrom:, drive_ramdisk these 4 reserved devices, so you want to prevent the hard drive from automatically running Autorun. INF file, you must set the value of drive_fixed to 1 because the drive_fixed represents a fixed drive, that is, the hard drive. Thus, the original 1 00101 01 (In the Table "value" column from the bottom up) will become binary 10011101, to 16 into 9 d. Now, to change the key value of "No Drive Type AutoRun" to 9d,00,00,00, turn off Registry Editor and restart the computer to turn off the AutoRun function of the hard drive.

How do I disable the CD autorun function? In fact, the Drive_cdrom is set to 1 so that the first value in the "No Drive typeautorun" key value becomes 10110101, or 16 B5. When the first value is changed to B5, the Registry Editor is closed and the CDROM autorun function is turned off after restarting the computer. If only want to prohibit "BU software cd AutoRun function, but also retains the CD audio disk automatic playback ability, at this time simply" No Drive Type AutoRun "key value to: bd,00,00,00 can. If you want to restore the Autorun function of the hard drive or the optical drive, reverse: the direction of operation.

In fact, most hard disk root H records do not require Autorun. INF file to run the program, so we can completely turn off the autorun feature of the hard drive, even if there is autorun in the root directory of the hard disk. INF file, Windows will not run the program specified in it, thereby preventing hackers from using Autorun.inf file intrusion purposes