How to auto start an application from a USB Stick

Question

5.00/5 (2 votes)

See more:

The question is about preparing a USB stick (thumb drive) to run an application whenever it is inserted to a computer without previous preparation on the PC to which it is inserted to.

Posted 7-Mar-13 22:30pm

Michael Haephrati

Add a Solution

2 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

OriginalGriff · Answer 1 · 2013-03-07T22:39:00

Solution 1

You can't, without the users express permission, not since mid-2011 anyway - MS removed it from all OS's to prevent the spread of malware.

Posted 7-Mar-13 22:39pm

OriginalGriff

Comments

Michael Haephrati 8-Mar-13 4:43am

You are right. :) In fact I expected answers like "use autorun.inf", but this will not work since mid-2011. However, I am asking because there are undocumented ways to make it work after all. There is some kind of a trick.

OriginalGriff 8-Mar-13 5:08am

I would not rely on them - this was changed for good reason, and there is absolutely no guarantee that these holes will not be closed either. Relying on undocumented features that expose security weaknesses is not normally a good idea in the mid to long term!

I would consider finding something else to do :laugh:

Michael Haephrati 8-Mar-13 5:12am

You are right, as people should not rely on such tricks, which become irrelevant after a while, as security patches are released. However, this question is only for the academic discussion, as there are roomers about a very good way to make it work.

OriginalGriff 8-Mar-13 5:20am

If you want that information, then your best route is:
1) Create a brand new sacrificial VM.
2) Make sure your AV is good quality and up-to-date.
3) Make sure your firewall is well and truly locked down.
4) Find a good proxy server
5) Cruise the hacker sites and look for / ask for the info.

But don't expect it to work for too long!

Michael Haephrati 8-Mar-13 5:23am

I posted it here because I wanted to avoid steps 1 to 4 :)

OriginalGriff 8-Mar-13 5:26am

You are out of luck - this is a site for professionals: we do not reveal security weaknesses until after they have been plugged tight.

Michael Haephrati · Answer 2 · 2013-03-08T05:45:00

One interesting solution would be using an HID device[^], which looks like a USB Thumb drive but in fact is recognized as a keyboard. When you attach a new keyboard to your PC, installation takes place immediately.
Here is an example: http://hakshop.myshopify.com/products/usb-rubber-ducky[^]

http://forums.hak5.org/index.php?/topic/28824-frequently-asked-questions-faq/[^]

To block malicious uses of such device, Microsoft will have to change their Plug and Play[^] behavior, which might become less automatic and less user friendly, but more secured.