A Method to Prevent Autorun-type Viruses based on IniFileMapping
Sun Ni-gang · Computers & Security · 2010
In recent years, Autorun-type viruses have become wide-spread through removable storage devices. Current methods of defense lag behind these continually updating viruses. After analyzing the start-up mechanism of the viruses and getting the key API called by the system, a new method is presented, which intercept the operation of the process Explorer.exe on the file autorun.inf. Also presented is an experiment which proves the efficacy of the new method.