So far as I know, if AutoPlay is enabled (which it is by default), you can't disable AutoRun.inf. Note that there doesn't appear to be an option for "data only". The default (which is to prompt the user) can be restored by deleting the entries. If AutoPlay is enabled, actions per content type can be set per user by right-clicking the drive in Explorer, then selecting the AutoPlay tab. However according to Microsoft's TechNet web-site, the NoDriveTypeAutoRun setting in HKCU is ignored if there is a corresponding entry in HKLM, so to disable AutoPlay on all drive types for all users:
Tweak UI allows disabling of AutoPlay either by device type (eg CD) or drive letter, and the setting is stored in the user registery under, but Tweak UI only shows the settings if the user is an Administrator. This basically is just a case of virus scan companies being lazy.įor Windows XP, SP2.
A lot of false positives are caused simply because a packer was used.įortunately, some of the better virus scaners actually unpack the software before checking it, or look for valid virus signatures instead of a simple Packer. I've dealt with this situation in size-coding competitions before, and it's not fun. Likely Walmart's programmers used one to keep the app's size small on a small device like that. "Generic" "NSPack" "PossibleThreat" in the VirSCAN links give that away.ĮXE/PE Packers simply compress a binary and decompress it on the fly, simply to save space or "load faster". Virus scanners have been labeling PE Packers as viruses for ages now, simply because a virus could be packed with them, and it's easier to pick out a packer header than a virus contained in it.Ī lot of false positives are caused by this, and this looks like one of those cases based on what you linked. It's not a virus, it's just a exe packer they used. Samsung Frame Manager XP Version 1.08, which is needed for using the SPF-85H as a USB monitor." Though Amazon was honest enough to issue an alert, that alert offers no reason to think that only Amazon's stock was affected. So I went to to see which vendors found what, and the results are here and here." Update: 12/29 05:44 GMT by T: The joy is even more widespread MojoKid points out that some larger digital photo frames have been delivered similarly infected this year, specifically Samsung's SPF-85H 8-inch digital photo frame, sold through Amazon among other vendors, which arrived with " worm on the installation disc for I scanned the one I have and AVAST did not find any virus. My father-in-law attached the device to his computer and his Trend Micro Anti-virus screamed that a virus is on the device. Blowit writes "With the Christmas holidays just past and opening up your electronic presents may get you all excited, but not for a selected lot of people who got the Mercury 1.5" Digital Photo Frame from Walmart (or other stores).