Horse which implements whatever it"s little virus heart desires, such as promoting privileges on the originating user. If administrative privileges are possessed, then it can invoke some other executable, such as a trojan horse virus, or it could itself be a trojan This executable could be a file that detects user privileges, and if the user does not possess administrative privileges, then it invokes Explorer on that directory to open the directory like normal. The vulnerability is that it is somewhat arbitrary for a programmer to throw together a small executable that checks the current user, and possibly that user"s permissions on the local machine.
If no icon is specified, the system default icon for that drive is used." I"ve used it to place cute little icons on my drives. Actually, this file can be placed on any drive, with exactly the same effects (a refresh of the drive list may be in order). The vulnerability exists because the autorun.inf file does not apply only to CD drives, or even removable media. The type of information that this file can contain, to the best of my knowledge, is an icon to display for the drive, and executables to run, the executable can actually be broken down by platform if needs be.ĭescriptive introduction. According to Eric's report, "Autorun.inf is a file that is primarily used on CDs containing information basically on what to do when a new CD is entered into the drive. Microsoft Windows 95, 98, NT 4.0, and possibly Win2KĮric reported an interesting discovery regarding AUTORUN.INF files on Windows platforms.
0 kommentar(er)
