To enhance the security of USB "autorun", we have those suggestion:
A. Enable the auto-scan in removable device:
1. Enter the "Advance setup" > "Computer" > "Antivirus and antispyware" > "Removable media" > Select option "Automatic device scan"
B. Disable the autorun option in registry and lock the setting by ESET HIPS
1. Enter "Regedit" > Select "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\" & "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\"
2. Change the hexadecimal value 000000FF (Decimal 255) of “NoDriveTypeAutoRun", if it doesn’t exist, create a new 32-bit DWORD with this name and assign it the hexadecimal value.
3. Enter the "Advance setup" > "Computer" > "HIPS" > " Configure rules" > "New" > "Target registry" > "Modify registry"
4. Add the registry key which changed before
C.Optional setting: Disable unmanaged/personal USB drive by device contral:
1. Enter the "Advance setup" > "Computer" > "Device control" > " Configure rules" > "Add"
2. You might add a specific hardware ID and user account to control the USB device usage.
Join ESET at Facebook