Microsoft has revealed plans to improve security of its Windows operating systems by adjusting the AutoRun functionality first introduced in Windows 95 and later expanded via AutoPlay in Windows XP.
According to the software giant, malware such as the Conficker worm is known to utilise the AutoRun feature in an effort to mislead users into activating Trojan Horses. Despite the long-running availability of AutoRun, Microsoft states that a study from Forefront Client Security found 17.7 per cent of all malware infections in the second half of 2008 came as a result of AutoRun misuse.
As the largest single cause of malware infections, it's now working to rectify the apparent flaw. So, how will it go about it?
At present, users making use of removable media such as USB flash drives are presented with an AutoPlay menu that looks a little something like this:
Microsoft's problem, and indeed the user's, is that hidden malware can be easily disguised to trick users into running harmful applications. In the above example, the link highlighted in red would launch the program and potentially infect a system whilst the link highlighted in green would merely run a Windows task.
It's an easy method of misleading users, and Microsoft's solution is to cease to display the AutoRun task for every device other than removable optical media. Following the change - which is already implemented into the Release Candidate of Windows 7 - users will no longer be provided with an AutoRun option in the AutoPlay menu, as shown below.
Whilst an obvious and easy solution, it could create problems for flash media that legitimately utilises the AutoRun functionality. Microsoft states it is "working with ecosystem partners to help mitigate situations where this AutoRun change will have an impact on them". Meanwhile, optical media such as non-writable CDs and DVDs will continue to allow the option to AutoRun.
The change in functionality is expected to appear in next week's Windows 7 Release Candidate, and will be implemented into Windows XP and Windows Vista via future software updates.
