1. On Windows XP:
The unfortunate thing for users of long-lived versions of Windows like Windows XP is that these operating systems lack a lot of “barricades” security to combat hidden threats from Autorun virus.
Join the channel Telegram belong to AnonyViet ???? Link ???? |
However, with the method below you can “Embarrassed to catch the enemy” to permanently tackle this insidious virus.
Step 1: Open Run (press key combination Windows + CHEAP or press the button Start > Run).
Step 2: Type secpol.msc to enter the operating system’s security policy window.
Step 3: Access the link Software Restriction Policy/Additional Rules.
Step 4: Delete all the links in this section, right click and select New Path Rule.
Select the existing partitions in your machine. For example, your computer is divided into 2 partitions, C and D, you select New 2 times these drives. Select the applicable law asUnrestricted.
Step 5: About branch Security Levels, enter Disallowed, select Set as Default.
Step 6: Back to branch Software Restriction Policy, click Enforcement,move back All Software Files and OK.
Step 7: Restart the machine or run the command “gupdate /force” in the windowCommand Prompt for the policy to be applied.
From now on, only program files will be in the drives created in theAdditional Rules just allowed to launch. Drives that are not in this list (i.e. plug-in USB drives) will not run the program files themselves.
Of course, Autorun files cannot run and spread viruses to your computer.
2. With Windows 7, Windows 8:
With these operating systems, there are already mechanisms in place to prevent drives from auto-starting, so it’s pretty simple. You can follow the steps with Windows XP, but here’s an easier way.
Step 1: Open dialog box Run.
Step 2: Type gpedit.msc, Enter to access the Administration menu of policies on the system.
Step 3: Access the link Computer Configuration/Administrative Templates/System/Removable Storage Access.
Step 4: Double click Policy: Removable Disks: Deny Execute access, selectEnable, Apply and OK. Exit the window Policy administration.
Step 5: Restart the machine or run the command “gupdate /force” in the Command Prompt window for the policy to be applied.
At this point, the machine will no longer automatically run files in USB drives or external drives.
A few points to note:
- These methods only prevent the virus from automatically spreading to the computer through the function of automatically running program files, if you copy the virus file to your computer and then launch it, then you must use an anti-virus program.
- To launch the program (such as portable versions of software, Silent Install versions, for example), we compress the file and run it directly in the compressed file. At this point, the files will run from the temporary folder of the drive on the computer, so there should be no problem.
- This method does not prevent the virus from spreading to the USB.