StatCounter


Wednesday, June 8, 2011

Protect yourself from Auto-run Attacks!

For years, Autorun-based malware has been atop of the worldwide e-threat landscape, with notorious representatives such as Trojan.AutorunInf, the Conficker worm (Win32.Worm.Downadup) or Worm.Autorun.VHD.


The Immunize option allows you to immunize your USB storage device or SD card against infections with autorun-based malware. Even if your storage device has been plugged into an infected computer, the piece of malware will be unable to create its autorun.inf file, thus annihilating any chance of auto-launching itself.

The Immunize Computer slider allows you to toggle the autorun feature On or Off for any removable media (except for CD/DVD-ROM devices). If you accidentally plug in an infected USB drive that has not been immunized, the computer will not auto-execute the piece of malware located on the USB storage device.

It doesn't not need to be install to use it. just double click and run it.



Comparison: Panda USB Vaccine V.S. Bitdefender USB Immunizer

A while ago, I did introduce 2 software that are able to disable auto-run which are Panda USB Vaccine and NoAutorun. As I didn't really try NoAutorun, I think I will skip it.

So a did a small test on both of the software. Since my computer is "vaccinated" by Panda, I remove it.


And when I try with Bitdefender, it said is immunized. When I check it with Panda, it say I'm not. So I think that Bitdefender only protect to a certain extent as they already mentioned:
"except for CD/DVD-ROM devices" which mean CD/DVD-roms devices are not disabled.

Panda USB Vaccine is disable autorun completely like USB drives or CD/DVD drives which I think is much safer.

Also, Bitdefender USB Immunizer failed to detect my external harddisk but Panda USB Vaccine is able to detect and disable it.

So I guess Panda USB Vaccine is much better than Bitdefender USB Immunizer.

The only difference is Bitdefender USB Immunizer doesn't require and installation to use it while Panda USB Vaccine need to be install before you can use it.

0 comments: