CD ROM drive autorun problem. 1

[hotfusion]

A colleague's computer (again!) has a CD ROM drive that won't autorun. No problem with it otherwise.
There are 2 entries under its Win98se registry for 'NoDriveTypeAutorun', the value given is, from memory, 'ff 00 00 95'.
On my system the value is '00 00 00 95'.
I haven't tried to alter the value yet as I wanted some advice on this before going any further. Can the 'ff' be changed safely for '00'?
Regards, Andy. My suggestions are what I would try myself. If incorrect, I welcome corrections to my rather limited knowledge. Andy.

 

[razled]

I always thought you could set the auto run up from the device manger, click on the settings box of your cd rom and tick the auto insertion box ?
Or is it not that simple ?

 

[hotfusion]

Yes, you can tick 'inert notification' or something like that, but that has already been done......... My suggestions are what I would try myself. If incorrect, I welcome corrections to my rather limited knowledge. Andy.

 

[Klick]

TechNet Article Q312475 says it's suppose to be:

4. In the right pane of the Registry Editor window, locate the NoDriveTypeAutoRun entry.

5. Edit the entry to display the following correct binary value in the "Value data" box:

NoDriveTypeAutoRun 0000 95 00 00 00

To do this, right-click NoDriveTypeAutoRun, and then click Modify. Under "Value data", type "95 00 00 00" (without the quotation marks), and then click OK.

6. On the Registry menu, click Exit to quit Registry Editor.

7. Restart your computer.

 

[razled]

ok, soz hot, still new to all this techno thophbie stuff

 

[smitee]

hotfusion

http://groups.google.ca/groups?hl=en&selm=3b324a94.3423445@news.iafrica.com&rnum=4

Pretty strong argument for using 9D rather than 95

excerpt..: cquirke@iafrica.com
------------------------------------------------------------------------
By the same token, a HD volume letter can be attacked by dropping a
hostile \AutoRun.inf into it; it will be triggered as soon as you peck
on the drive letter to see what is in it.

To defend against that risk (which has been exploited by
auto-spreading malware, which is why I am now explicitly describing
the exploit), you should set the bit in NoDriveTypeAutoRun that codes
for HD volumes, so that HD volumes are not considered to be AutoRun
devices (beats me why they ever were, but hey... that's MS).


Interesting NoDriveTypeAutoRun values:

95 Windows duh-fault; autoruns CDs and HD volumes
B5 After TweakUI "paranoia"; autoruns HD volumes, not CD
9D Recommended; autoruns CD, not HD volumes
BD Recommended as safer; does not autorun CD or HD volumes
00 Autoruns everything (including diskettes)
FF Autoruns nothing


TweakUI's "Paranoia" setting preserves the HD volume bit, it just
toggles the bit for CD-ROM. However, several scumbag CD titles splat
the whole bitfield back to 95, so thier precious title will run and
cut thier support calls, even though this re-opens risk of HD attack.
-------------------------------------------------------------------------- smitee

 

[hotfusion]

Smitee, you've done it again! A perfect and informative answer. Thank you very much! My suggestions are what I would try myself. If incorrect, I welcome corrections to my rather limited knowledge. Andy.

 

[ANFPS26]

Now that you have that working, if you want to disable the auto-run feature for one particlar CD at a time temporarily, just hold down the shift key when you insert the CD and it won't auto-run. "A little knowledge is a dangerous thing....."