Prevent virus infections from USB drives!

Most of the viruses are executed only when user double-clicks the USB drives icon in My Computer.
There are two ways to prevent virus infection from usb drives:


1) TURN OFF DRIVE AUTORUN


There is an easy way to prevent auto-execution of viruses:
- GOTO Start Menu > RUN (Windows +R)
- Type “GPEDIT.MSC”
- GOTO USER Config> Admin Templates> System
- On right side pane, double click on TURN OFF AUTOPLAY
- Change value to ENABLED & select ALL DRIVES option from combo box
- Repeat the above steps to TURN OFF AUTOPLAY option in 
    COMPUTER Config> Admin Templates> System


2) SET SOFTWARE POLICY RESTRICTIONS


-Open GPEDIT
-Goto Computer Configuration> Windows Settings > Security Settings
-Right click on software Restriction Policy & select Create new Policies.
(If that option is not there then just expand the tree.)
-Right Click on additional rules and select “NEW PATH RULE”
-Enter drive letter of your usb drive & set the SECURITY LEVEL as disallowed and click apply.


Repeat above steps for all other USB drives. As there can be more than one usb port available.


Now all executable files(*.exe, *.bat, *.cmd, *.vbs, *.scr) present on usb drive are blocked from execution.
If you need to run an application residing in usb drive, copy that application to your systems local drive.

1 comments:

Post a Comment