Bienvenido! - Willkommen! - Welcome!

Bitácora Técnica de Tux&Cía., Santa Cruz de la Sierra, BO
Bitácora Central: Tux&Cía.
Bitácora de Información Avanzada: Tux&Cía.-Información
May the source be with you!

Friday, July 29, 2011

Panda USB vaccine - autorun.inf

Para deshabilitar el autorun de los lectores de CD y DVD
cambiar autorun de 1 a 0
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom
==================
www.pandasecurity.com/homeusers/downloads/usbvaccine/
soporte para NTFS en pañales desde hace años..
BETA 1.0? PUFF!!!... software español...
como que no sea común un disco usb en NTFS
Soy el único que quiero quitar esa opción de Panda Global Protection de un usuario?
Mientras que todos lo quieren instalar... Están avisados!
Removing Panda Vaccine autorun_.inf
(without formatting USB disk or flash memory)
Panda USB Vaccine can protect your USB disks against autorun viruses and malware, by creating a un-removable autorun.inf on the root folder of your USB disk. According to Panda Security, this can be removed only by formatting the USB disk. But there is a workaround.
The technique used by Panda USB Vaccine is that it modifies the file table, making the autorun.inf file inaccessible permanently. We will open the file table and edit it to make the autorun.inf file readable, writable and deletable. Here is the process :
  1. Download a copy of iBored v. 1.1.8- a portable hex editor which can edit the disk sectors.
    For mac users

    For MS users
    Note to Windows users:
    On Window 7 (maybe on Vista, too), you may get an empty disks list. In that case, you need to quit iBored, right-click on its icon, and choose Run as administrator from the menu.
  2. Insert the Panda USB Vaccine protected USB key into USB port of your computer.
  3. Extract the contents of the iBored zip file to a folder and run iBored.exe.
  4. iBored will show you a list of detected disks attatched to your computer. Be careful to select the USB key. Click View to open the disk sector.
  5. Select the Hex tab by clicking on it as shown.
  6. Press the key combination Ctrl + F to open the find dialog. In the Find dialog, type AUTORUN INF and click Find button as shown :
  7. iBored will show and highlight the found string. The found hex values are highlighted in green. We have to edit the very next value to the found values. In this case, it is value 40 in hex (I have marked it with an arrow). This value can be different in your case (e.g., it may be 42).
  8. From the menu select BlockView → Make Writable to be able to edit this block. You can also press the key combination Ctrl + Shift + M.
  9. Click on the value we want to edit and type 20. This would edit the value from 40 to 20.
  10. Click on the Save button to save the disk sector. Close iBored window.
  11. That's it. Now autorun.inf file created by Panda USB Vaccine is accessible, readable, writable and deletable.

No comments: