AutoPlay Changes In Windows 7
Due to the fact that most of the existing malware infect a Windows operating system through the AutoRun tasks shown into the AutoPlay dialog, in Windows 7 Release Candidate will be performed changes upon the way in which the AutoRun options are displayed. The modifications affect the AutoPlay dialog functionality, having the main purpose to eliminate the direct interaction of users with AutoRun tasks. In this way, the chances of success of a malware attack started through AutoRun are minimized.
Based on the autorun.inf directives, when a new media (USB drive, DVD or CD) is inserted into a computer, one of the AutoRun tasks could be a trigger for a malware attack, diplayed as a tricky entry alongside the legitimate options of AutoPlay dialog.
Windows 7 Release Candidate will not show the AutoRun task in the AutoPlay dialog in case of devices that are not removable optical media (CD/DVD). This decision was taken due to the absence of a suitable method to identify the origin of these entries.
As a consequence, the AutoRun tasks will be shown for a CD or DVD having an installable software on it, but if a USB drive is inserted into the computer, then the AutoRun options will no longer be available on the AutoPlay dialog.
In conclusion, starting with the Release Candidate build of Windows 7, Microsoft introduces a new balance between security and usability of removable media. The malicious software which abuse of AutoRun Windows function, especially on USB devices, will have less chances of succeeding in the launch of an attack over a computer powered by Windows 7 operating system.
Related Articles
