Microsoft Finally Turns Off AutoRun in Vista, XP

Page 2 - Seeking answers? Join the Tom's Hardware community: where nearly two million members share solutions and discuss the latest tech.
Status
Not open for further replies.
G

Guest

Guest
This article is mis-leading.

First, Autorun was not changed by Microsoft this week. That is, nothing happened with automatic updates to Windows. The only change was that a patch from Aug 2009 was made an OPTIONAL update in Windows update. Without manual intervention, the patch is not installed.

Also, the patch only offers partial protection. USB devices can and do present themselves to Windows as CDs and thus AutoRun is enabled on them.

For more see
http://blogs.computerworld.com/17808/windows_autorun_microsoft_is_wrong_computerworld_is_right


 

davewolfgang

Distinguished
Aug 30, 2010
454
0
18,860
This article is mis-leading.

First, Autorun was not changed by Microsoft this week. That is, nothing happened with automatic updates to Windows. The only change was that a patch from Aug 2009 was made an OPTIONAL update in Windows update. Without manual intervention, the patch is not installed.

Also, the patch only offers partial protection. USB devices can and do present themselves to Windows as CDs and thus AutoRun is enabled on them.

For more see
http://blogs.computerworld.com/17808/windows_autorun_microsoft_is_wrong_computerworld_is_right

Ummmm....you are in the wrong story.

Auto-run - When you insert a CD, DVD or USB device, Windows won't try to automatically run whatever it on the device.

Has nothing to do with Automatic UPDATING/Windows Update.
 

PhoneyVirus

Distinguished
Sep 24, 2008
90
0
18,630
Configuring Programs That Run Automatically

An extremely common performance problem occurs when Windows automatically loads an excessive number of programs at startup. The result, especially on systems with minimal memory, is unpleasant: Startup takes unnecessarily long, applications that you never use steal memory from programs you use frequently, and the page file gets more of a workout than it should. Some programs, such as antivirus utilities, need to start up automatically. But in most cases you’re better served by running programs when you need them and closing them when they’re not needed.

Overcrowded startups are most common on computer systems sold in retail outlets, where Windows XP is preinstalled, along with a heaping helping of applications. In some cases, the bundled programs are welcome; but a free software program is no bargain if it takes up memory and you never use it. After purchasing a new PC, it’s always a good idea to look through the list of bundled software so that you can keep the programs you plan to use and discard the ones you don’t want or need. In previous versions, you could spot the symptoms of an overstuffed system by looking at the long line of icons in the notification area at the right of
the taskbar. Because Windows XP tidies these icons regularly, you might not realize that you have a problem on your system.

Tracking down programs that start automatically isn’t as easy as it sounds. A program can be configured to run at startup by any of the following methods:

● Startup folder (User) The %UserProfile%\Start Menu\Programs\Startup folder contains shortcuts that run when a specific user account logs on.

● Startup folder (Common) Shortcuts in the %AllUsersProfile%\Start Menu\
Programs\Startup folder run automatically whenever any user logs on.

● Run key (Machine) Programs listed in the registry’s HKLM\Software\ Microsoft\Windows\CurrentVersion\Run key are available to all users.

● Run key (User) Programs listed in the HKCU\Software\Microsoft\Windows\
CurrentVersion\Run registry key run when the current user logs on. A similar subkey, HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run, may also be used.

● Load value Programs listed in the Load value of the registry key HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows run when any user logs on.

● Scheduled Tasks folders You can use Scheduled Tasks to specify per-user tasks that run at startup. In addition, an administrator can set up startup tasks for your user account; by default such tasks are listed only in the administrator’s Scheduled Tasks folder, not your own. Other users can also schedule tasks that run when you log on; these tasks run as background processes only.

● Win.ini Programs written for 16-bit Windows versions may add commands to the Load= and Run= lines in the [Windows] section of this startup file located in %SystemRoot%, a legacy of the Windows 3.1 era.

● RunOnce and RunOnceEx keys This group of registry keys identifies programs that run once and only once at startup. These keys may be assigned to a specific user account or to the machine.

■ HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
■ HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
■ HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
■ HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

● RunServices and RunServicesOnce keys As the names suggest, these rarely used keys can control automatic startup of services. They may be assigned to a specific user account or to a computer.

● Winlogon key The Winlogon key controls actions that occur when you log on to a computer running Windows XP. Most of these actions are under the control of the operating system, but you can also add custom actions here; if you set up automatic logon using the Windows XP version of Tweak UI, for instance, your saved settings are stored here.

The HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\
Winlogon\Userinit and HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\
Winlogon\Shell subkeys can automatically launch programs.

● Group Policy The Group Policy console includes two policies called Run These Programs At User Logon that specify a list of programs to be run whenever any user logs on.

● Policies\Explorer\Run keys Using policies to specify startup programs, as described in the previous paragraph, creates corresponding values in either of two registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run or
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run.

It is possible for a legitimate program or rogue process to create or modify these registry values directly—that is, without using the Group Policy object. Note that disabling the Run These Programs At User Logon policies in Group Policy Editor does not prevent Windows from launching the items listed in the Policies\Explorer\Run registry keys.

● BootExecute value By default, the multi-string BootExecute value of the registry key HKLM\System\CurrentControlSet\Control\Session Manager is set to autocheck autochk *. This value causes Windows, at startup, to check the file-system integrity of your hard disks if your system has been shut down abnormally. It is possible for other programs or processes to add themselves to this registry value. (Note: Microsoft warns against deleting the default BootExecute value. For information about what to do if your system hangs while Autocheck is running, see Microsoft Knowledge Base article
151376, “How to Disable Autochk If It Stops Responding During Reboot.”)

● Shell service objects Windows loads a number of helper dynamic-link libraries (DLLs) to add capabilities to the Windows shell. The list of authorized objects includes a DLL to create the CD Burning folder, for instance, as well as another that permits Internet Explorer to check Web sites for updates. Writers of viruses and Trojan horse
programs have also discovered the HKLM\SOFTWARE\Microsoft\Windows\
CurrentVersion\ShellServiceObjectDelayLoad key, however, and some have used this location to surreptitiously start up unauthorized software.

● Logon scripts Logon scripts, which run automatically at startup, can open other programs. Logon scripts are specified in Group Policy in Computer Configuration\Windows Settings\Scripts and User Configuration\Windows Settings\Scripts (Logon/
Logoff).

Windows XP includes a System Configuration Utility, Msconfig.exe, which allows you to see most of the programs that run at startup. Although it resembles the Windows 98/Me utility of the same name, it adds important features not found in those operating systems. For anyone upgrading to Windows XP from Windows 2000, this utility is a completely new
addition. To start the System Configuration Utility, type msconfig in the Run dialog box and press Enter.

I hope this helps out the Poweruser as it did for me, still reading Windows XP inside out 2th Edition 8 Chapters left the information came from Chapter 10 page 446, 447, 448.

Yeah I know the book is old but so much of it exists in windows 7 witch I'll be getting every soon!

PhoneyVirus
 
Status
Not open for further replies.