[unisog] Pen testers after my own heart...

Brian Anderson brian.anderson at darton.edu
Tue Jun 13 16:25:51 GMT 2006

> -----
> Q: What must I do to trigger Autorun on my USB storage device?
> The Autorun capabilities are restricted to CD-ROM drives and fixed disk 
> drives. If you need to make a USB storage device perform Autorun, the 
> device must not be marked as a removable media device and the device 
> must contain an Autorun.inf file and a startup application.
> The removable media device setting is a flag contained within the SCSI 
> Inquiry Data response to the SCSI Inquiry command. Bit 7 of byte 1 
> (indexed from 0) is the Removable Media Bit (RMB). A RMB set to zero 
> indicates that the device is not a removable media device. A RMB of one 
> indicates that the device is a removable media device. Drivers obtain 
> this information by using the StorageDeviceProperty request.
> -----
> ipods and nearly all usb sticks are all classified as removable media 
> and this you cannot enable autorun without some other program already 
> running on the PC (heck, that's why ipods require the ipodagent.exe 
> running on the host PC to detect the ipod insertion).

I've got a "secure" usb drive, cost about $30 several yrs ago, which mounts as a disk drive and tries to autorun the software for it's secure feature.

Cheap and easily available.

Brian L. Anderson
Darton College
Office of Information Technology
brian.anderson at darton.edu

More information about the unisog mailing list