Fixing a Computer's Windows Registry so that AUTORUN.INF is Disabled
--------------------------------------------------------------------


DISABLE AUTORUN.INF
-------------------

Copy the three lines below into a text file and save it with ".reg". 

REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]
@="@SYS:DoesNotExist"

This hack tells Windows to treat AUTORUN.INF as if it were a configuration file from a pre-Windows
95 application ... it says "whenever you have to handle a file called AUTORUN.INF, don't use the 
values from the file. You'll find alternative values at HKEY_LOCAL_MACHINE\SOFTWARE\DoesNotExist." 
And since that key, er, does not exist, it's as if AUTORUN.INF is completely empty, and so nothing 
autoruns, and nothing is added to the Explorer double-click action. Result: worms cannot get in - 
unless you start double-clicking executables to see what they do ...

If this zap gets very popular, malware may look for it, so it can't hurt to change it just a bit. 
For example, I might use something like

@="@SYS:DoesNotExistMadMod"

This is not at all required. The zap as shown above works fine. 


RE-ENABLE AUTORUN.INF
---------------------

Open REGEDIT and navigate down to 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping. 
There will be a subkey ("folder") called Autorun.inf. Delete it.