Microsoft fixes problem in disabling AutoRun

Microsoft has fixed a problem that prevents users from selectively disabling AutoRun features in an effort to stop the Conficker worm from spreading.

The fix corrects an issue that prevents the NoDriveTypeAutoRun registry key from functioning as expected when users try to disable AutoRun, according to the advisory.

AutoRun is a Windows feature that allows files or programs to immediately run as soon as a removable media device, such as a USB stick or CD-ROM, is connected to a computer.

The update from Microsoft comes after US-CERT last month issued a warning that Windows does not properly disable AutoRun, which could allow malicious code to spread. One of the vectors by which the infectious Conficker, or Downadup, worm propagates is through removable storage devices.

Microsoft said it recommends all customers to install the update, which affects all supported Windows versions.