TopResource.NET

Virus are really make computer user become inconvenience,  the development of the virus actually has been growing up. This is because now so easy to transfer data between one to other computer by using USB Flash disk or USB removable harddisk. Also now, there are more computer connected to internet, this is other way of virus to infect by network.

Many kind of viruses have been created by using many method for infection, but in this artcile, we will only discuss how to tackle the virus that work with autorun when we insert the removable usb storage media and how to avoid infected by virus using vbs script.

Autorun

By default, Windows XP have automatically running an autorun when we insert removable USB storage media or CD at CDROM drive. The autorun also will run if the USB storage media have a autorun.inf file. This is a script file to tell the computer for running specific program when the USB connected. This method has been created for help user easier when they want to load something from USB without click anything to run. But this method also used by people who are not responsible for creating a virus.

So, first of all, better if we disable the autorun at our computer. To disable the autorun at Windows XP Professional, we can use group policy. To do this, type gpedit.msc at run box which is start from start menu:

At Group Policy → Computer Configuration → Administrative Template → System → Turn off Autoplay, then
at Setting window, choose Enable to Turn off Autoplay on: All drivers.

After that, continue to do the same way at :

At Group Policy → User Configuration → Administrative Template → System → Turn off Autoplay, then
at Setting window, choose Enable to Turn off Autoplay on: All drivers.

For Windows Home edition, it does not have gpedit.msc, we can copy it from Windows XP Professional or we can use TweakUI from Windows Powertoys, download it from:

http://www.microsoft.com/windowsxp/downloads/powertoys/xppowertoys.mspx

Delete or Rename wscript.exe

VBS Script is only script, to execute vbs script, Windows need wscript.exe program. The wscript.exe file is located in the folder C:WindowsSystem32.  To avoid vbs virus infected our computer, better to rename it to other name, for example, wscript.xxx or anything you want. But please note, to rename this file, we have to start the Windows XP at safe mode, otherwise if we rename at normal Windows XP, the new wscript.exe will be created.