AutoRun - Knowledge (XXG)

1043: 4505: 1855: 25: 4516: 1492: 1709:

This leaves the user open to attack from malware which uses the autorun.inf to alter the double-click and contextual menu behaviours. Double clicking the drive icon will infect the machine. Right Clicking and selecting the "Explore" or "Open" options from the context menu is not a workaround as these

459:

With the introduction of AutoPlay in Windows XP, the final stage action (stage 7 above) for some drive types changed from executing an application to invoking AutoPlay. From Windows Vista, the AutoPlay system is integrated into every aspect of media handling and there is no automatic execution of the

264:

The initial sequence is handled much the same in every version of Windows from Windows 95. However, the way the autorun.inf file is read and acted upon and the level of integration of AutoRun with AutoPlay has changed significantly from the time AutoPlay was introduced in Windows XP until the present

756:

Registry entries can exist in two places, the per-user setting (under HKEY_CURRENT_USER) and the per-machine setting (under HKEY_LOCAL_MACHINE). If an entry appears under HKEY_LOCAL_MACHINE, then any corresponding entry under HKEY_CURRENT_USER is completely ignored. The data values are not merged in

150:

is inserted into a CD-ROM drive, Windows detects the arrival and checks the contents for a special file containing a set of instructions. For a CD containing software, these instructions normally initiate installation of the software from the CD-ROM onto the hard drive. To maximise the likelihood of

1885:

AutoRun malware has been extended to use hard drives, picture frames and other digital devices. Care in dealing with external devices is a security priority. The prevalence of malware infection by means of AutoRun and USB flash drive was documented in a 2011 Microsoft study analyzing data from more

1217:

Prior to Windows Vista, when media containing an autorun.inf specifying an AutoRun task was :inserted, the default action was to automatically execute the program without user intervention. :From Windows Vista the default behaviour is to invoke AutoPlay and represent the AutoRun task as :one of the

1092:

The policy names, locations and possible settings vary slightly between Windows versions. The list of settings are relatively short and are always additional to the system default setting. Therefore, on Windows 2000, enabling the "Disable Autoplay" policy and setting it to "CD-ROM drives", disables

1030:

The data is a 32 bit (DWORD) bitmapped value, of which the lower 26 bits are used to represent each of the 26 drive letters from A to Z. Thus the valid data range is from 0x0 to 0x03FFFFFF. The least significant bit (the right most bit) represents drive A, and the 26th bit from the right represents

240:

is a feature introduced in Windows XP which examines removable media and devices and, based on content such as pictures, music or video files, launches an appropriate application to play or display the content. If available, settings in an autorun.inf file can add to the options presented to the

1304:

In these versions of Windows, the ability of an autorun.inf file to set an AutoRun task, alter double-click behaviour or change context menus is restricted to drives of type DRIVE_CDROM. There are no policy settings that will override this behaviour. Policy locations and settings are as per

1396:

Given that Shift must be held down until Windows checks for it, it may be a considerable amount of time before it becomes effective. The time taken primarily depends on the time to recognise the new hardware and the time taken for CD-ROMs to spin up. It is unsafe to rely on this method.

1681:

Since either the policy setting or this workaround disable autorun, installation of software from an autorunning install CD or DVD will obviously no longer be automatic. It will be necessary to view the CD's autorun.inf file and then execute the appropriate install program manually.

1026:

This Registry entry disables or enables the AutoRun feature on individual drives. It is not associated with a Group Policy and does not exist by default. The data value is taken to be 0 if the entry is not present. An entry present in HKLM overrides any entry present in HKCU.

215: 670:

consists of a name-data pair. Microsoft documentation commonly uses the term "entry" as an equivalent term. It also uses "value" for "data" when it is obvious what is meant. To avoid confusion, this article always uses the term "entry" when referring to the name-data pair.

1814:

AutoRun functionality has been used as a malware vector for some time. Prior to Windows Vista, the default action with a CD-ROM drive type was to follow any autorun.inf file instructions without prompts or warnings. This makes rogue CD-ROMs one possible infection vector.

436:

On Windows versions prior to Windows XP, an autorun.inf file on any drive type will be read and its instructions followed. The AutoRun task, if specified, is executed immediately without user interaction. This includes DRIVE_REMOVABLE, DRIVE_FIXED and DRIVE_REMOTE

1690:

Microsoft recognized that "Because code may be executed without user's knowledge or consent, users may want to disable this feature because of security concerns." and released a "Fixit" to disable AutoRun for users not comfortable with editing the registry.

166:, the terms AutoRun and AutoPlay were used interchangeably, developers often using the former term and end users the latter. This tendency is reflected in Windows Policy settings named AutoPlay that change Windows Registry entries named AutoRun, and in the 206:. AutoRun is positioned as a layer between AutoPlay and the Shell Hardware Detection service which may help in understanding the terminology. However, to avoid confusion, this article uses the term AutoRun when referring to the initiating action. 1388:

key is held down at a certain point in the execution sequence, Windows Vista invokes the AutoPlay dialog regardless of any AutoPlay settings to the contrary. Previous versions of Windows do not execute the AutoRun task. It is essential that the

1551:

This entry is used to suppress the MCN message for specifically listed type of CD-ROM drive, primarily CD-ROM changers. The data is a set of device identifiers, which matches those identifiers reported to the system by the devices themselves.

319:

Non-volume devices are those devices that do not appear as drive letters in "My Computer". These are not handled by any part of AutoRun - any actions taken for these devices are taken either by device specific software or by AutoPlay. See

256:

The AutoRun sequence starts with the initial discovery of a new device or new piece of media. Following this, notification of interested parties occurs, of which the Windows Explorer shell is of primary interest. After checking certain

198:

Primarily used on installation CD-ROMs, the applications called are usually application installers. The autorun.inf file can also specify an icon which will represent the device visually in Explorer along with other advanced features.

2804: 1096:

This setting cannot be used to enable AutoRun on drives on which it is disabled by default or disable AutoRun for drives not listed. To disable or enable any particular drives or drive types, the Registry must be edited manually.

176:. The terminology was of little importance until the arrival of Windows XP and its addition of a new feature to assist users in selecting appropriate actions when new media and devices were detected. This new feature was called 244:

AutoPlay is based on a set of handler applications registered with the AutoPlay system. Each media type (Pictures, Music, Video) can have a set of registered handlers which can deal with playing or display that type of media.

1890:. That finding was in line with other statistics, such as the monthly reporting of most commonly detected malware by antivirus company ESET, which lists abuse of autorun.inf as first among the top ten threats in 2011. 227: 1085:, Group Policy deletes this entry from the Registry for the Machine policy (in HKLM) and sets it back to system defaults value for the User policy (in HKCU). System defaults may then take effect as described in the 1625:

Windows Vista and later versions of Windows have a policy setting, "Default behavior for AutoRun", that can be set to disallow the reading of an autorun.inf file on any volume. This avoids certain scenarios where

1878:

string promising free games or pornography would lure many users into the trap. At any time, double clicking on the drive icon will use the autorun.inf automatically, a trap more advanced users could fall into.

901:

Note that bit number 1 is unused and that the "Unknown" type is represented twice. Setting all bits to 1 would give a hexadecimal value of 0xFF, decimal 255, and would disable AutoRun on all types of drives.

1507:

Although the Registry entry is named "AutoRun", it only suppresses the MCN message. The MCN message does trigger AutoRun initiation but it also instructs the Explorer shell to update its views and contents.

1616:

In the above example, AutoRun would be disabled for all drives and for all users. This example would need to be run as Administrator and a reboot would be needed for the setting to take complete effect.

384:

key is held down. If it is then Windows Vista (and later Windows versions) will invoke the AutoPlay dialog regardless of settings to the contrary. Previous versions of Windows will not continue with the

1518:

For this reason the Media Change Notification message should not be disabled unless there is absolutely no alternative; AutoRun can be disabled for individual drives using Group Policy or the Registry.

1886:

than 600 million systems worldwide in the first half of 2011. The study found that 26 percent of all malware infections of Windows system were due to USB flash drives exploiting the AutoRun feature in

879:

This Registry entry disables or enables the AutoRun feature on all drives of the type specified. It reflects the setting of the relevant Autoplay Group Policy. Valid data ranges from 0x00 to 0xFF in

371:

and contextual menu behaviours. When a user double clicks on the drive icon in Explorer or right clicks to get a context menu, what happens is fully programmable by settings in the autorun.inf file.

1917:

exposure to these attacks can be minimised through the appropriate use of Group Policy and Registry settings. The following security policies are a summary of those described within this article:

444:

AutoRun will work with network drives (the DRIVE_REMOTE drive type) that are mapped to a drive letter. AutoRun will also work with floppy drives that are provided with autorun-compatible drivers.

1511:

Thus, as a side effect only, this disables AutoRun for CD-ROM drives. However, Explorer will now not update its view when a new CD is inserted; it will show the contents of the previous CD until

1699:

From Windows 2000 through to Windows Server 2008, AutoRun-relevant Registry entries were not handled properly leading to a security vulnerability. Windows 95 and Windows 98 were not affected.

1818:

In the same category are mixed content CD-ROMs. An audio CD, that a user would not expect to contain software at all, can contain a data section with an autorun.inf. Some companies, such as

1678:

As this key does not exist, it is as if the autorun.inf file contains no settings information. It is important to note that this applies to any autorun.inf in any location and on any drive.

883:

notation. If the entry is not present, the default data value is either 0x95 or 0x91 depending on the version of Windows used. An entry present in HKLM overrides any entry present in HKCU.

2708: 2384: 1882:

Any user can configure AutoPlay to make various decisions for them; by checking the appropriate box in the AutoPlay dialog, running flash drive malware becomes silent and automatic.

2784: 892: 1409:

events may be suppressed by altering certain Registry entries. "Media Change Notification" is the generic term; for CD-ROM drives, the specific term is "Auto Insert Notification".

1124:

Once the policy is Enabled it can be set to "All drives" or "CD-ROM drives". The latter setting adds CD-ROM drives to the existing list of disabled drive types as described above.

2542: 1555:

The default value for this entry consists of products identified by Microsoft testing as being unable to support AutoRun. This entry should not be altered from its default.

335:

Checks to see if AutoRun has been disabled through the Registry. If AutoRun is disabled for that drive or drive type, Explorer does not proceed further. There have been

1706:

sequence than the Registry check. However, it parses any autorun.inf found and does everything except the final action to invoke AutoPlay or execute an application.

1453:

For CD-ROM drives, changing the value of this Registry entry to 0 will disable Auto Insert Notification for CD-ROM drives only. A Windows restart will be necessary.

886:

The entry data is a bitmapped value, where a bit set to 1 disables AutoRun on a particular type of drive. The bit settings for each type of drive are shown below:

273:, Microsoft has added the option to enable autorun in its settings. Not only users can turn it on but also they can choose specific external devices for autoplay. 202:

The terms AutoRun and AutoPlay tend to be interchangeably used when referring to the initiating action, the action that detects and starts reading from discovered

2699: 1062:

Registry entries. The policy is available on either a per-machine or a per-user basis reflecting the Registry entry location in either HKLM or HKCU. As described

248:

Each hardware device can have a default action occurring on discovery of a particular media type, or the AutoPlay dialog can prompt the user what action to take.

1734:

Some programs may deliberately change AutoRun Registry settings. Early versions of CD burning software like Roxio have been known to change settings in this way.

3520: 2478: 1874:

With a standard flash drive, social engineering attacks can be employed to entice a user to click on the appropriate item in the AutoPlay dialog. An alluring

1839:

HSDPA modem validly use this method to autoinstall drivers for the modem itself. However, plugging in a flash drive from an unknown source is an unwise move.

490:

values to decide whether to initiate actions for any particular drive or drive type. These values can be changed using several methods, one of which is using

1567:

section. However, the Group Policy Editor is not available on Home versions of Windows XP and does not provide any fine-grained drive selection facilities.

3535: 3700: 2777: 2722: 357:

can respond to this message to halt AutoRun (and thus AutoPlay) at this point. Any application, foreground or not, can also be notified by using the

1819: 2690: 2294: 1034:

A bit set to 1 disables AutoRun on a particular drive. For example, if the data value is set to 0x8 (1000 binary), AutoRun is disabled on drive D.

414:

Which choice is made depends on the version of Windows in use, instructions from the autorun.inf if available and the type of the media discovered.

3357: 2651: 2594: 2362: 656:

that stores configuration settings and options for the operating system. The terminology is somewhat misleading so it is briefly summarised here.

292:

notification to all top-level windows. Windows calls this a "basic" notification. A top-level window is one which is a descendant of the desktop.

2381: 505:. These exist in both per-machine and per-user settings and their location and priority in the Registry are described in further detail below. 285:

then notifies interested applications that a device change has occurred. The notification method used can change depending on the device type.

4391: 2770: 1942:

Under Windows 7, only CD and DVD drives may specify applications like the AutoRun task in the autorun.inf file. Windows XP and later can be

4520: 2793: 1645:

calls are used by Windows when fetching its settings. These API calls can be redirected using the INI file mapping method. The following

146:

to ease application installation for non-technical users and reduce the cost of software support calls. When an appropriately configured

3770: 3410: 2994: 2829: 1295:

If this policy is Enabled, the "Always do this..." checkbox in the AutoPlay dialog will not be set :by default when the dialog is shown.

891: 3942: 3851: 3367: 2999: 2463: 2663:, A standalone software that prevents PC from autorun worms and protects the removable device from being infected from other sources. 1630:

leverages autorun.inf functionality to infect a machine. Previous versions of Windows do not have this policy setting but the use of

2150: 2032: 1804:

RealPlayer 10 interferes with AutoPlay functionality to the extent that it may look as if AutoRun or AutoPlay is not working at all.

108: 2493: 3690: 3670: 3633: 3595: 3580: 663:

is similar to a folder that, in addition to values, each key can contain subkeys which in turn may contain subkeys, and so on.

768:

Registry entries are consulted. If either value indicates a drive should be disabled then AutoRun is disabled for that drive.

470:

The handling of the autorun.inf file changes very significantly between each Windows version. The details can be found in the

4436: 4018: 3545: 1093:

AutoRun (as distinct from AutoPlay) for CD-ROM and DVD drives, removable drives, network drives, and drives of unknown type.

46: 1488:

Under Windows 95/98/ME, this setting can be changed under Device Manager, accessible from the System icon in Control Panel.

1731:

value may be reset to a default value. This is due to Group Policy settings in the domain taking effect. This is not a bug.

3560: 281:

When a device with AutoRun-compatible drivers receives new media, a "Media Change Notification" event occurs. The Windows

261:

settings to see if AutoRun can proceed, parsing of an optional autorun.inf may occur and any necessary actions are taken.

4401: 4270: 3957: 3947: 3821: 3725: 3585: 2942: 2897: 1903: 2553: 451:), disable Remote and Removable drives from AutoRun initiation, leaving Fixed and CDROM drive types active by default. 4541: 4509: 3877: 3836: 3735: 3590: 3387: 3102: 3052: 2067: 89: 61: 4099: 3979: 3685: 3184: 2824: 2817: 2812: 1840: 353:

message to the foreground window. An application which has registered its interest in receiving this message using

187:) introduced in Windows 95, enables media and devices to launch programs by use of command listed in a file called 1148:

The relevant policy is "Turn off Autoplay" and can be set for CD-ROM, DVD-ROM and removable drives or all drives.

726:". When the file is double clicked, the settings in the file are entered into the Registry, permissions allowing. 35: 4431: 4396: 3826: 3816: 3755: 3665: 3555: 3525: 3174: 2872: 2745: 1954:

channel. The Windows 7 AutoRun task behaviour now becomes the default for all current versions of the Windows OS.

1515:

is pressed or View/Refresh is selected from the Explorer menu. This could result in severe confusion for users.

3796: 3740: 3720: 3565: 3334: 3219: 1714: 740:

It may be necessary to either logout or restart the computer in order for any Registry changes to take effect.

68: 42: 3109: 478:

drives of type DRIVE_CDROM may specify an AutoRun task, alter double-click behaviour or change context menus.

463:

The default Registry settings add Removable drives to those that initiated AutoRun. In Windows XP and higher,

1832:

a CD-ROM unit, can also cause Windows to execute commands from the autorun.inf found on the emulated CD-ROM.

1393:

Shift key is used for this purpose as holding down the right Shift key for eight seconds invokes FilterKeys.

1121:

The relevant policy is "Turn off Autoplay". In Windows 2000 the policy is called "Disable Autoplay" instead.

4381: 4376: 4220: 4215: 4175: 4135: 4085: 3831: 3575: 3570: 3445: 3420: 3382: 3352: 3302: 3114: 3037: 2962: 2882: 2857: 342:

Checks that the root directory of the inserted media contains an autorun.inf file, which might be read. See

2508: 4361: 4325: 3937: 3922: 3680: 3638: 3530: 3460: 3377: 3362: 2957: 361: 1822:, have used this vector to install malware that attempts to protect against copying of the audio tracks. 75: 4490: 4310: 4255: 4195: 4180: 3989: 3660: 3615: 3472: 3425: 2359: 1992:

Setting USB devices to read only to prevent propagation of unknown worms (and theft of proprietary data)

1578:

A Registry setting file can be created that, when executed, makes the desired changes in the Registry.

4475: 4470: 4315: 4285: 4250: 4140: 3846: 3841: 3745: 3695: 3653: 3623: 3510: 3097: 3062: 3009: 2947: 1747:

Windows Installers will also malfunction because "Local System" access to the CD-ROM will be denied.

1570:

However, Group Policy would be the accepted method of disabling AutoRun on an entire Windows domain.

1563:

AutoRun may be suppressed on particular drives and drive types by using the methods described in the

653: 184: 2526: 57: 4416: 4275: 4230: 4205: 4160: 4106: 3905: 3760: 3643: 3092: 3077: 3017: 2937: 2907: 1737:

If the Group Policy "Restrict CD-ROM access to locally logged-on user only" security option under:

1042: 288:

If the device changed is a volume (like a CD) or a port (like a serial port) Windows broadcasts a

4421: 4371: 4145: 4064: 4050: 3969: 3675: 3515: 3482: 3455: 3450: 3124: 3027: 3022: 2922: 1844: 682:

which contains settings for the currently logged-on user. These are almost always abbreviated as

203: 1854: 729:

They can be changed indirectly by using Group Policy, applied locally to a single computer with

2642: 2132: 2117: 2095: 2080: 2062: 214: 4485: 4411: 4366: 4265: 4260: 4235: 4190: 4155: 4025: 3329: 3139: 2972: 2224: 1943: 1887: 308: 136: 129: 2671: 4426: 4335: 4170: 4113: 4071: 3932: 3900: 3856: 3811: 3730: 3490: 3287: 3164: 3154: 2917: 2912: 2344: 2329: 2314: 2276: 2261: 2219: 1958:

In addition, the following actions have been recommended by Microsoft, primarily during the

487: 282: 258: 156: 132: 1218:

dialog options. This is also the behaviour when this policy is Not configured or :Disabled.

4462: 4345: 4320: 4305: 4295: 4245: 4240: 3994: 3628: 3344: 3209: 3199: 3144: 3129: 2987: 2877: 2660: 2388: 2366: 2302: 1136:

Computer Configuration \ Administrative Templates \ Windows Components \ Autoplay Policies

559: 1740:

Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options

467:

Windows Server 2003, only the Unknown and Remote drive types are not active for AutoRun.

2183: 3952: 3495: 3307: 3297: 3282: 3214: 3082: 3057: 3032: 2982: 2952: 2862: 1951: 192: 1843:

and similar tools have made U3 flash drive attacks trivial. Given the ease of writing

1144:

User Configuration \ Administrative Templates \ Windows Components \ AutoPlay Policies

4535: 4441: 4300: 4200: 3540: 3500: 3277: 3252: 3244: 3179: 3047: 2847: 2717: 1825: 1649:

illustrates the workaround, where all autorun.inf settings are taken solely from the

1066:, a per-machine policy setting will cause the per-user policy setting to be ignored. 304: 231: 82: 1607:

Note that the actual file should always end with a blank line. This is not optional.

295:

However, if the device changed is not one of these types an application can use the

4210: 4165: 4092: 4057: 3765: 3715: 3505: 3257: 3204: 3169: 3087: 3067: 2887: 2867: 2680: 2513: 1047: 491: 368: 173: 152: 905:

The default setting for this entry depends on the version of Windows being used:

690:

respectively. There may be many users of a machine; their settings are stored in

4280: 4225: 4130: 3984: 3872: 3750: 3605: 3397: 3372: 2967: 2739: 2009: 1875: 1836: 880: 471: 426: 403: 167: 24: 2762: 1491: 1232:

Automatically execute the autorun.inf command as per previous Windows versions.

4185: 4009: 3550: 3440: 3314: 3234: 3159: 2977: 1969:

Deleting any existing autorun.inf file from the root of a mapped network drive

1863: 1848: 1500: 1051: 270: 163: 143: 2709:

The best way to disable Autorun for protection from infected USB flash drives

2382:

The best way to disable Autorun for protection from infected USB flash drives

374:

Adds an autorun.inf controllable icon and descriptive text to the drive icon.

3806: 3801: 3435: 3324: 3272: 3042: 2625:

Removable storage devices are not recognized after installing Windows XP SP2

2401:

Windows Vista fails to properly handle the NoDriveTypeAutoRun registry value

1959: 1907: 1867: 1859: 380: 266: 219: 2047: 447:

The default Registry settings on Windows versions prior to Windows XP (See

2609: 1212:

Sets the default behavior for AutoRun commands found in autorun.inf files.

4386: 4290: 4150: 3910: 3775: 3405: 3262: 3149: 3134: 3072: 2932: 2892: 2727: 2624: 2579: 2564: 2448: 2433: 2415: 2243: 2201: 2168: 2004: 1829: 1702:

When AutoRun is disabled, Windows should not proceed further through the

1638: 1631: 1367: 1109:

Group Policy \ Computer Configuration \ Administrative Templates \ System

607: 394:

executes the "AutoRun task", the application optionally specified in the

321: 237: 125: 2400: 573:

The disk cannot be removed from the drive (hard disk/solid state drive)

4406: 4340: 4078: 3964: 3927: 3915: 3600: 3319: 3292: 3229: 2927: 2852: 2404: 1627: 2733: 1851:

software may be ineffective in preventing data and password stealing.

4480: 4330: 3999: 3780: 3705: 2543:

Microsoft Security Intelligence Report Volume 11, January-June, 2011.

2345:

Windows XP Pro Resource Kit, Differences with Windows XP Home Edition

1986:

Appropriate Registry settings as described in Knowledge Base article

1928:

Use the "Default behavior for AutoRun" Group Policy under Vista (see

1496: 1117:

Group Policy \ User Configuration \ Administrative Templates \ System

312: 151:

installation success, AutoRun also acts when the drive is accessed ("

147: 1750:

This Group Policy setting reflects the value of the Registry entry:

226: 2672:

Security Watch Island Hopping: The Infectious Allure of Vendor Swag

1223:

If this policy is Enabled, the behaviour can be changed to either:

4446: 3882: 3710: 3415: 3189: 2902: 2756: 1853: 1710:

menu items can be coopted by the appropriate autorun.inf entries.

1490: 1041: 225: 213: 2666: 3974: 3648: 3467: 3430: 2750: 2610:

How can I prevent users from connecting to a USB storage device?

1981: 1713:

This bug was fixed in a number of security updates, detailed in

1255:

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

1251:

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

1172:

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

1168:

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

1058:

The only Group Policy settings available for AutoRun affect the

989:

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

985:

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

842:

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

838:

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

183:

AutoRun, a feature of Windows Explorer (actually of the shell32

2766: 3892: 3224: 3194: 3119: 2295:

Group Policy Settings Reference for Windows and Windows Server

1642: 822:

is 0x95, disabling removable and network drives. The per-user

18: 2746:

How to Enable / Disable Autorun for a Drive (using Registry)

2434:

The AutoRun feature or the AutoPlay feature does not work...

1727:

If one adds the computer to an Active Directory domain, the

890: 1972:

Denying Create rights to the root of a mapped network drive

710:

Registry settings may be changed directly by using the GUI

513:

The drive types are distinguished by Type Name as follows:

135:

that dictate what actions the system takes when a drive is

2449:

You receive an "Installation ended prematurely because..."

2048:

How to receive notification of CD-ROM insertion or removal

1757:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

1151:

Two related policies were added in Vista and Server 2008:

1950:. In February 2011, this patch was added to the official 1898:

In addition to basic security precautions, which include

1366:

If this policy is enabled, AutoPlay will be disabled for

674:

Two Registry keys that are very commonly referred to are

315:

by Doran Holan is of particular technical interest here.

180:

and a differentiation between the two terms was created.

818:

is 0x08, disabling drive D and the data value taken for

631:

The drive currently can't be accessed (detached drives)

2595:

Deeper insight into the Security Advisory 967940 update

1966:

Prevent autorun.inf invocation from network shares by:

1929: 1744:

is turned on (Enabled), then AutoRun may not function.

536:

The drive-type could not be determined (generic drive)

299:

function to register to receive device notifications.

2736:

on the autorun/autostart feature of Microsoft Windows

2700:

Test your defenses against malicious USB flash drives

1977:

Prevent the use of USB storage devices by means of:

698:

is actually just a link to the appropriate place in

547:

The drive is currently invalid (no mounted volumes)

172:

file which causes "AutoPlay" to be added to drives’

4459: 4354: 4123: 4042: 4035: 4008: 3891: 3865: 3789: 3614: 3481: 3396: 3343: 3243: 3008: 2838: 2753:

turn on/off the autorun/autoplay feature of Windows

2244:

How to disable the Autorun functionality in Windows

2033:

What's the difference between AutoPlay and AutoRun?

1987: 1947: 1913:

applying all relevant security patches and updates,

1778: 1756: 1728: 1650: 1540: 1525: 1436: 1415: 1347: 1326: 1322: 1275: 1254: 1250: 1192: 1171: 1167: 1074: 1059: 1009: 988: 984: 862: 841: 837: 823: 819: 815: 765: 761: 753: 749: 734: 730: 723: 715: 711: 699: 695: 691: 687: 683: 679: 675: 502: 498: 474:article. The current handling in Windows 7 is that 358: 354: 350: 296: 289: 188: 168: 49:. Unsourced material may be challenged and removed. 722:, named with a .reg extension type. For example, " 1327:HKCU\Software\Policies\Microsoft\Windows\Explorer 1323:HKLM\Software\Policies\Microsoft\Windows\Explorer 1101:Windows Server 2003, Windows XP, and Windows 2000 388:Finally, if this point has been reached, either: 1936: 1406: 760:When deciding whether to activate AutoRun, both 2742:simple configuration tool for Autorun settings. 2580:Update to the AutoPlay functionality in Windows 2416:The NoDriveTypeAutoRun subkey value is reset... 595:The drive is a CD-ROM, DVD-ROM or BD-ROM drive 2146: 2144: 2028: 2026: 2024: 497:The primary relevant Registry entry names are 2778: 2215: 2213: 1637:As an autorun.inf file is a standard Windows 558:The drive has removable media (floppy drive, 305:"Detecting Hardware Insertion and/or Removal" 8: 2257: 2255: 1922: 1526:HKLM\SYSTEM\CurrentControlSet\Services\Cdrom 1416:HKLM\SYSTEM\CurrentControlSet\Services\Cdrom 641:This value reserved for future-technologies 364:interface available in Windows XP and later. 336: 2509:Chinese Trojan on Maxtor HDDs spooks Taiwan 2494:How to repair your camera Autoplay download 2429: 2427: 2330:Windows 2000 Registry: AutoRunAlwaysDisable 2290: 2288: 2239: 2237: 2235: 2233: 2197: 2195: 4515: 4039: 2785: 2771: 2763: 2681:Figure 4: querycancelautoplay example code 2565:Virus alert about the Win32/Conficker worm 2464:Camera and Scanner Wizard, stopped working 718:utility. Settings can also be placed in a 2527:Malware hitches a ride on digital devices 2220:Windows 2000 Registry: NoDriveTypeAutoRun 2164: 2162: 678:which contains per-machine settings, and 331:change, it performs a number of actions: 327:When Explorer receives notification of a 109:Learn how and when to remove this message 2479:Autoplay not working with digital camera 2391:, Michael Horowitz - Defensive Computing 2113: 2111: 2109: 2107: 1752: 1651:HKEY_LOCAL_MACHINE\Software\DoesNotExist 1521: 1512: 1455: 1411: 1385: 1318: 1313:Turn off Autoplay for non-volume devices 1246: 1226:Completely disable autorun.inf commands 1163: 1077:entry to the Registry. If the policy is 980: 907: 833: 773: 515: 378: 2277:Windows Vista Security Guide, Chapter 3 2096:Creating an AutoRun-Enabled Application 2020: 1703: 1086: 652:The Windows Registry is a hierarchical 448: 343: 303:An article on the CodeProject website, 2202:How to use a registration entries file 1946:to behave in the same way with update 620:The drive has not yet been determined 584:The drive is a remote (network) drive 16:Components of the Microsoft Windows OS 4392:Next-Generation Secure Computing Base 2262:Windows 2000 Registry: NoDriveAutoRun 1661:Windows Registry Editor Version 5.00 1586:Windows Registry Editor Version 5.00 1239:Don't set the always do this checkbox 1063: 7: 2713:Computerworld blog, January 30, 2009 2704:Computerworld blog, January 24, 2009 2667:Dan McCloy's Autorun Reference Guide 2554:Global Threat Report, December 2011. 2151:AutoPlay: frequently asked questions 2063:Detecting media insertion or removal 1132:The per-machine policy location is: 1105:The per-machine policy location is: 1054:showing option to turn off AutoPlay. 322:AutoPlay#Devices that are not drives 47:adding citations to reliable sources 3521:Distributed Transaction Coordinator 2081:RegisterDeviceNotification function 1646: 719: 3852:User Interface Privilege Isolation 1307:Windows Vista, Windows Server 2008 1128:Windows Vista, Windows Server 2008 14: 1932:) to disable autorun.inf commands 1564: 1300:Windows 7, Windows Server 2008 R2 1140:The per-user policy location is: 1113:The per-user policy location is: 4514: 4504: 4503: 438: 23: 3581:Remote Differential Compression 1939:to nullify autorun.inf sections 1906:by not habitually running with 771:Thus in the following example: 427:autorun.inf § Inf handling 34:needs additional citations for 4437:Windows System Assessment Tool 2643:AutoRun and AutoPlay Reference 2599:Security Response Center blogs 2315:Windows 2000 Registry: AutoRun 2133:IQueryCancelAutoPlay Interface 2118:Enabling and Disabling AutoRun 1588:"NoDriveTypeAutoRun" 1: 2468:Gladiator Security chat forum 2169:How to Test autorun.inf Files 1921:Disable AutoRun (but see the 1669:"@SYS:DoesNotExist" 1472:Does not send an MCN message 3726:Open XML Paper Specification 3586:Remote Installation Services 2794:Microsoft Windows components 2759:Create your own AutoRun Menu 1904:principle of least privilege 1634:is an effective workaround. 1309:above with the addition of: 1158:Default behavior for AutoRun 1073:, Group Policy will add the 3878:Windows Subsystem for Linux 3837:Mandatory Integrity Control 3591:Windows Deployment Services 3388:Wireless Zero Configuration 2734:Online Information Resource 2718:How To Remove AutoRun Virus 2498:tech-archive.net chat forum 1937:initialization file mapping 1632:initialisation file mapping 1621:Initialization file mapping 895:drive type bitwise settings 277:Initiation and notification 4558: 3980:Universal Windows Platform 3686:Kernel Transaction Manager 3671:Hardware Abstraction Layer 3368:Multimedia Class Scheduler 1375:Altering AutoRun behaviour 706:Changing Registry settings 424: 297:RegisterDeviceNotification 162:Until the introduction of 142:AutoRun was introduced in 124:and the companion feature 4499: 4432:Windows Services for UNIX 3817:Data Execution Prevention 3666:Graphics Device Interface 3556:Network Access Protection 3175:Remote Desktop Connection 2800: 2695:Microsoft Download Center 2685:Microsoft Systems Journal 1828:enabled flash drives, by 1771: 1768: 1765: 1762: 1755: 1524: 1414: 1407:Media Change Notification 1321: 1249: 1166: 983: 836: 814:the data value taken for 779: 776: 714:tool or the command line 402:keys in an autorun.inf's 3797:Security and Maintenance 3741:Security Account Manager 3335:Windows XP visual styles 1980:USB settings within the 1715:Microsoft Knowledge Base 1659: 1584: 1401:Auto Insert Notification 391:takes no further action. 4382:Media Control Interface 4216:Help and Support Center 3832:Kernel Patch Protection 3596:System Resource Manager 3576:Remote Desktop Services 3571:Print Services for UNIX 3353:Service Control Manager 2963:Windows Error Reporting 2883:DirectX Diagnostic Tool 1801:and should be set to 0. 1695:The AutoRun disable bug 1276:DontSetAutoplayCheckbox 1050:settings dialog box on 4362:Desktop Cleanup Wizard 3938:COM Structured storage 3639:Desktop Window Manager 3531:Windows Media Services 2757:Create an AutoRun Menu 2691:AutoPlay Repair Wizard 1871: 1504: 1380:Pressing the Shift key 1348:NoAutoplayfornonVolume 1055: 896: 317: 234: 223: 128:are components of the 3990:Windows Mixed Reality 3661:Enhanced Write Filter 3511:Roaming user profiles 2184:GetDriveType Function 1857: 1495:AutoRun settings for 1494: 1482:Sends an MCN message 1045: 894: 826:entry is never used. 377:Checks to see if the 355:RegisterWindowMessage 301: 229: 217: 4271:Mobile Device Center 4221:Health & Fitness 4019:Solitaire Collection 3847:User Account Control 3842:Protected Media Path 3746:Server Message Block 3696:Logical Disk Manager 2948:System Policy Editor 2933:System Configuration 1559:Editing Group Policy 1541:AutoRunAlwaysDisable 733:or to a domain with 648:Registry terminology 614:DRIVE_NOT_DETERMINED 455:Introducing AutoPlay 359:IQueryCancelAutoPlay 159:(or "My Computer"). 43:improve this article 4417:Virtual DOS machine 3761:System Idle Process 3736:Resource Protection 3644:Portable Executable 3536:Active DRM Services 2938:System File Checker 2908:Performance Monitor 2723:Microsoft PowerToys 2483:vista-xp chat forum 1923:AutoRun disable bug 1686:Issues and security 943:Windows Server 2003 927:Windows Server 2008 794:NoDriveTypeAutoRun 351:QueryCancelAutoPlay 4542:Windows components 4422:Windows on Windows 4146:Backup and Restore 3958:Transaction Server 3676:I/O request packet 3516:Folder redirection 3185:Speech Recognition 2943:System Information 2898:Management Console 2652:Memory stick worms 2517:, 12 November 2007 2387:2013-06-06 at the 2365:2011-10-31 at the 2360:Memory stick worms 2155:Windows Vista Help 2037:Windows Vista Help 1872: 1729:NoDriveTypeAutoRun 1641:, the appropriate 1505: 1087:NoDriveTypeAutoRun 1075:NoDriveTypeAutoRun 1060:NoDriveTypeAutoRun 1056: 1017:0x0 to 0x03FFFFFF 897: 863:NoDriveTypeAutoRun 830:NoDriveTypeAutoRun 820:NoDriveTypeAutoRun 788:NoDriveTypeAutoRun 780:HKEY_CURRENT_USER 777:HKEY_LOCAL_MACHINE 766:NoDriveTypeAutoRun 754:NoDriveTypeAutoRun 676:HKEY_LOCAL_MACHINE 499:NoDriveTypeAutoRun 449:NoDriveTypeAutoRun 421:Changing behaviour 252:AutoRun activation 235: 224: 4529: 4528: 4455: 4454: 4412:Video for Windows 4367:Games for Windows 4236:Internet Explorer 3330:Windows Spotlight 2973:Windows Installer 2661:Autorun Protector 2656:Nick Brown's blog 2533:, 11 January 2008 2371:Nick Brown's blog 1894:Attack mitigation 1888:Microsoft Windows 1835:Devices like the 1800: 1799: 1676: 1675: 1614: 1613: 1549: 1548: 1486: 1485: 1451: 1450: 1359: 1358: 1288: 1287: 1205: 1204: 1069:When a policy is 1024: 1023: 974: 973: 877: 876: 812: 811: 680:HKEY_CURRENT_USER 645: 644: 541:DRIVE_NO_ROOT_DIR 486:AutoRun consults 482:Registry settings 409:invokes AutoPlay. 404:[autorun] 130:Microsoft Windows 119: 118: 111: 93: 4549: 4518: 4517: 4507: 4506: 4427:Windows SideShow 4206:Food & Drink 4100:Spider Solitaire 4040: 3933:ActiveX Document 3901:Active Scripting 3857:Windows Firewall 3812:Credential Guard 3491:Active Directory 3288:Indexing Service 2918:Resource Monitor 2913:Recovery Console 2787: 2780: 2773: 2764: 2687:, September 1998 2676:TechNet Magazine 2631: 2622: 2616: 2607: 2601: 2592: 2586: 2577: 2571: 2562: 2556: 2551: 2545: 2540: 2534: 2524: 2518: 2506: 2500: 2491: 2485: 2476: 2470: 2461: 2455: 2446: 2440: 2431: 2422: 2413: 2407: 2398: 2392: 2379: 2373: 2357: 2351: 2342: 2336: 2327: 2321: 2312: 2306: 2292: 2283: 2274: 2268: 2259: 2250: 2241: 2228: 2217: 2208: 2199: 2190: 2181: 2175: 2166: 2157: 2148: 2139: 2130: 2124: 2115: 2102: 2093: 2087: 2078: 2072: 2060: 2054: 2045: 2039: 2030: 1989: 1949: 1780: 1758: 1753: 1730: 1717:article 967715. 1670: 1667: 1664: 1656: 1655: 1652: 1601: 1598: 1595: 1592: 1589: 1581: 1580: 1542: 1527: 1522: 1456: 1438: 1417: 1412: 1349: 1328: 1324: 1319: 1277: 1256: 1252: 1247: 1194: 1173: 1169: 1164: 1076: 1061: 1011: 990: 986: 981: 914:Default setting 911:Operating system 908: 864: 843: 839: 834: 825: 821: 817: 774: 767: 763: 755: 751: 744:Evaluation order 736: 732: 725: 717: 713: 701: 697: 693: 689: 685: 681: 677: 516: 504: 500: 488:Windows Registry 401: 397: 360: 356: 352: 298: 291: 191:, stored in the 190: 170: 157:Windows Explorer 133:operating system 114: 107: 103: 100: 94: 92: 51: 27: 19: 4557: 4556: 4552: 4551: 4550: 4548: 4547: 4546: 4532: 4531: 4530: 4525: 4495: 4463:Microsoft Store 4461: 4451: 4397:POSIX subsystem 4377:File Protection 4350: 4321:Program Manager 4306:Phone Companion 4296:Outlook Express 4246:Make Compatible 4176:Desktop Gadgets 4136:Anytime Upgrade 4119: 4031: 4004: 3995:Windows Runtime 3887: 3861: 3827:Family features 3785: 3610: 3566:DFS Replication 3477: 3392: 3383:Error Reporting 3339: 3239: 3115:Mobility Center 3110:Movies & TV 3004: 2988:Windows Insider 2878:Driver Verifier 2873:Drive Optimizer 2840: 2834: 2825:Booting process 2796: 2791: 2751:Disable Autorun 2639: 2634: 2623: 2619: 2608: 2604: 2593: 2589: 2578: 2574: 2563: 2559: 2552: 2548: 2541: 2537: 2525: 2521: 2507: 2503: 2492: 2488: 2477: 2473: 2462: 2458: 2447: 2443: 2432: 2425: 2414: 2410: 2399: 2395: 2389:Wayback Machine 2380: 2376: 2367:Wayback Machine 2358: 2354: 2343: 2339: 2328: 2324: 2313: 2309: 2293: 2286: 2275: 2271: 2260: 2253: 2242: 2231: 2218: 2211: 2200: 2193: 2182: 2178: 2167: 2160: 2149: 2142: 2131: 2127: 2116: 2105: 2094: 2090: 2079: 2075: 2061: 2057: 2046: 2042: 2031: 2022: 2018: 2001: 1896: 1847:based attacks, 1841:USB Switchblade 1812: 1807: 1796: 1791: 1786: 1781: 1723: 1697: 1688: 1672: 1671: 1668: 1665: 1662: 1623: 1603: 1602: 1599: 1596: 1593: 1590: 1587: 1576: 1561: 1514: 1479: 1469: 1403: 1387: 1382: 1377: 1325: 1302: 1253: 1170: 1154: 1130: 1103: 1040: 987: 979: 840: 832: 746: 708: 650: 625:DRIVE_NOT_FOUND 606:The drive is a 560:USB flash drive 552:DRIVE_REMOVABLE 511: 484: 457: 434: 432:Before AutoPlay 429: 423: 399: 395: 383: 290:WM_DEVICECHANGE 279: 254: 212: 195:of the medium. 115: 104: 98: 95: 52: 50: 40: 28: 17: 12: 11: 5: 4555: 4553: 4545: 4544: 4534: 4533: 4527: 4526: 4524: 4523: 4512: 4500: 4497: 4496: 4494: 4493: 4488: 4483: 4478: 4473: 4467: 4465: 4457: 4456: 4453: 4452: 4450: 4449: 4444: 4439: 4434: 4429: 4424: 4419: 4414: 4409: 4404: 4399: 4394: 4389: 4384: 4379: 4374: 4369: 4364: 4358: 4356: 4352: 4351: 4349: 4348: 4343: 4338: 4333: 4328: 4326:Steps Recorder 4323: 4318: 4313: 4308: 4303: 4298: 4293: 4288: 4283: 4278: 4273: 4268: 4263: 4258: 4253: 4248: 4243: 4238: 4233: 4228: 4223: 4218: 4213: 4208: 4203: 4198: 4193: 4188: 4183: 4178: 4173: 4168: 4163: 4158: 4153: 4148: 4143: 4138: 4133: 4127: 4125: 4121: 4120: 4118: 4117: 4110: 4103: 4096: 4089: 4082: 4075: 4068: 4061: 4054: 4046: 4044: 4037: 4033: 4032: 4030: 4029: 4022: 4014: 4012: 4006: 4005: 4003: 4002: 3997: 3992: 3987: 3982: 3977: 3972: 3967: 3962: 3961: 3960: 3955: 3953:OLE Automation 3950: 3945: 3940: 3935: 3930: 3920: 3919: 3918: 3913: 3908: 3897: 3895: 3889: 3888: 3886: 3885: 3880: 3875: 3869: 3867: 3863: 3862: 3860: 3859: 3854: 3849: 3844: 3839: 3834: 3829: 3824: 3819: 3814: 3809: 3804: 3799: 3793: 3791: 3787: 3786: 3784: 3783: 3778: 3773: 3768: 3763: 3758: 3753: 3748: 3743: 3738: 3733: 3728: 3723: 3721:Object Manager 3718: 3713: 3708: 3703: 3698: 3693: 3688: 3683: 3681:Imaging Format 3678: 3673: 3668: 3663: 3658: 3657: 3656: 3651: 3641: 3636: 3631: 3626: 3620: 3618: 3612: 3611: 3609: 3608: 3603: 3598: 3593: 3588: 3583: 3578: 3573: 3568: 3563: 3558: 3553: 3548: 3543: 3538: 3533: 3528: 3523: 3518: 3513: 3508: 3503: 3498: 3493: 3487: 3485: 3479: 3478: 3476: 3475: 3470: 3465: 3464: 3463: 3458: 3453: 3448: 3443: 3438: 3428: 3423: 3418: 3413: 3408: 3402: 3400: 3394: 3393: 3391: 3390: 3385: 3380: 3378:Task Scheduler 3375: 3370: 3365: 3360: 3355: 3349: 3347: 3341: 3340: 3338: 3337: 3332: 3327: 3322: 3317: 3312: 3311: 3310: 3308:Special folder 3305: 3300: 3295: 3290: 3280: 3275: 3270: 3265: 3260: 3255: 3249: 3247: 3241: 3240: 3238: 3237: 3232: 3227: 3222: 3220:Voice Recorder 3217: 3212: 3207: 3202: 3197: 3192: 3187: 3182: 3177: 3172: 3167: 3162: 3157: 3152: 3147: 3142: 3137: 3132: 3127: 3122: 3117: 3112: 3107: 3106: 3105: 3095: 3090: 3085: 3080: 3075: 3070: 3065: 3060: 3055: 3050: 3045: 3040: 3035: 3030: 3025: 3020: 3014: 3012: 3006: 3005: 3003: 3002: 2997: 2992: 2991: 2990: 2983:Windows Update 2980: 2975: 2970: 2965: 2960: 2955: 2953:System Restore 2950: 2945: 2940: 2935: 2930: 2925: 2920: 2915: 2910: 2905: 2900: 2895: 2890: 2885: 2880: 2875: 2870: 2865: 2863:Device Manager 2860: 2855: 2853:Command Prompt 2850: 2844: 2842: 2836: 2835: 2833: 2832: 2827: 2822: 2821: 2820: 2815: 2807: 2801: 2798: 2797: 2792: 2790: 2789: 2782: 2775: 2767: 2761: 2760: 2754: 2748: 2743: 2737: 2731: 2720: 2715: 2706: 2697: 2688: 2678: 2669: 2664: 2658: 2649: 2638: 2637:External links 2635: 2633: 2632: 2629:Knowledge Base 2617: 2614:Knowledge Base 2602: 2587: 2584:Knowledge Base 2572: 2569:Knowledge Base 2557: 2546: 2535: 2519: 2501: 2486: 2471: 2456: 2453:Knowledge Base 2441: 2438:Knowledge Base 2423: 2420:Knowledge Base 2408: 2393: 2374: 2352: 2337: 2322: 2307: 2284: 2269: 2251: 2248:Knowledge Base 2229: 2209: 2206:Knowledge Base 2191: 2176: 2173:Knowledge Base 2158: 2140: 2125: 2103: 2088: 2073: 2055: 2052:Knowledge Base 2040: 2019: 2017: 2014: 2013: 2012: 2007: 2000: 1997: 1996: 1995: 1994: 1993: 1990: 1984: 1975: 1974: 1973: 1970: 1962:worm attacks: 1956: 1955: 1952:Windows Update 1940: 1933: 1926: 1915: 1914: 1911: 1910:privileges and 1902:following the 1895: 1892: 1866:screenshot on 1811: 1810:Attack vectors 1808: 1806: 1805: 1802: 1798: 1797: 1794: 1792: 1789: 1787: 1784: 1782: 1779:allocatecdroms 1777: 1774: 1773: 1770: 1767: 1764: 1760: 1759: 1742: 1741: 1735: 1732: 1724: 1722: 1719: 1696: 1693: 1687: 1684: 1674: 1673: 1660: 1653:Registry key: 1622: 1619: 1612: 1611: 1610: 1609: 1585: 1575: 1574:Registry files 1572: 1560: 1557: 1547: 1546: 1543: 1537: 1536: 1533: 1529: 1528: 1484: 1483: 1480: 1477: 1474: 1473: 1470: 1467: 1464: 1463: 1460: 1449: 1448: 1445: 1442: 1439: 1433: 1432: 1429: 1426: 1423: 1419: 1418: 1402: 1399: 1381: 1378: 1376: 1373: 1372: 1371: 1364: 1361: 1360: 1357: 1356: 1354: 1352: 1350: 1344: 1343: 1340: 1337: 1334: 1330: 1329: 1315: 1314: 1301: 1298: 1297: 1296: 1293: 1290: 1289: 1286: 1285: 1283: 1281: 1278: 1272: 1271: 1268: 1265: 1262: 1258: 1257: 1243: 1242: 1240: 1236: 1235: 1234: 1233: 1230: 1220: 1219: 1215: 1213: 1210: 1207: 1206: 1203: 1202: 1200: 1198: 1195: 1189: 1188: 1185: 1182: 1179: 1175: 1174: 1160: 1159: 1146: 1145: 1138: 1137: 1129: 1126: 1119: 1118: 1111: 1110: 1102: 1099: 1083:Not configured 1039: 1036: 1022: 1021: 1018: 1015: 1012: 1010:NoDriveAutoRun 1006: 1005: 1002: 999: 996: 992: 991: 978: 977:NoDriveAutoRun 975: 972: 971: 968: 964: 963: 960: 956: 955: 952: 948: 947: 944: 940: 939: 936: 932: 931: 928: 924: 923: 920: 916: 915: 912: 899: 898: 875: 874: 871: 868: 865: 859: 858: 855: 852: 849: 845: 844: 831: 828: 824:NoDriveAutoRun 816:NoDriveAutoRun 810: 809: 806: 803: 802:(Not Present) 800: 796: 795: 792: 791:NoDriveAutoRun 789: 786: 785:NoDriveAutoRun 782: 781: 778: 762:NoDriveAutoRun 750:NoDriveAutoRun 745: 742: 707: 704: 649: 646: 643: 642: 639: 636: 633: 632: 629: 626: 622: 621: 618: 615: 611: 610: 604: 601: 597: 596: 593: 590: 586: 585: 582: 579: 575: 574: 571: 568: 564: 563: 556: 553: 549: 548: 545: 542: 538: 537: 534: 531: 527: 526: 523: 520: 510: 507: 503:NoDriveAutoRun 483: 480: 460:AutoRun task. 456: 453: 433: 430: 422: 419: 418: 417: 416: 415: 411: 410: 407: 392: 386: 375: 372: 365: 347: 340: 309:clarifications 278: 275: 253: 250: 211: 208: 193:root directory 153:double-clicked 117: 116: 31: 29: 22: 15: 13: 10: 9: 6: 4: 3: 2: 4554: 4543: 4540: 4539: 4537: 4522: 4513: 4511: 4502: 4501: 4498: 4492: 4489: 4487: 4484: 4482: 4479: 4477: 4474: 4472: 4469: 4468: 4466: 4464: 4458: 4448: 4445: 4443: 4442:Windows To Go 4440: 4438: 4435: 4433: 4430: 4428: 4425: 4423: 4420: 4418: 4415: 4413: 4410: 4408: 4405: 4403: 4400: 4398: 4395: 4393: 4390: 4388: 4385: 4383: 4380: 4378: 4375: 4373: 4370: 4368: 4365: 4363: 4360: 4359: 4357: 4353: 4347: 4344: 4342: 4339: 4337: 4334: 4332: 4329: 4327: 4324: 4322: 4319: 4317: 4314: 4312: 4311:Photo Gallery 4309: 4307: 4304: 4302: 4299: 4297: 4294: 4292: 4289: 4287: 4284: 4282: 4279: 4277: 4274: 4272: 4269: 4267: 4264: 4262: 4259: 4257: 4256:Meeting Space 4254: 4252: 4249: 4247: 4244: 4242: 4239: 4237: 4234: 4232: 4229: 4227: 4226:HyperTerminal 4224: 4222: 4219: 4217: 4214: 4212: 4209: 4207: 4204: 4202: 4199: 4197: 4196:Easy Transfer 4194: 4192: 4189: 4187: 4184: 4182: 4179: 4177: 4174: 4172: 4169: 4167: 4164: 4162: 4159: 4157: 4154: 4152: 4149: 4147: 4144: 4142: 4139: 4137: 4134: 4132: 4129: 4128: 4126: 4122: 4116: 4115: 4111: 4109: 4108: 4104: 4102: 4101: 4097: 4095: 4094: 4090: 4088: 4087: 4083: 4081: 4080: 4076: 4074: 4073: 4069: 4067: 4066: 4062: 4060: 4059: 4055: 4053: 4052: 4048: 4047: 4045: 4041: 4038: 4034: 4028: 4027: 4023: 4021: 4020: 4016: 4015: 4013: 4011: 4007: 4001: 3998: 3996: 3993: 3991: 3988: 3986: 3983: 3981: 3978: 3976: 3973: 3971: 3968: 3966: 3963: 3959: 3956: 3954: 3951: 3949: 3946: 3944: 3941: 3939: 3936: 3934: 3931: 3929: 3926: 3925: 3924: 3921: 3917: 3914: 3912: 3909: 3907: 3904: 3903: 3902: 3899: 3898: 3896: 3894: 3890: 3884: 3881: 3879: 3876: 3874: 3871: 3870: 3868: 3866:Compatibility 3864: 3858: 3855: 3853: 3850: 3848: 3845: 3843: 3840: 3838: 3835: 3833: 3830: 3828: 3825: 3823: 3820: 3818: 3815: 3813: 3810: 3808: 3805: 3803: 3800: 3798: 3795: 3794: 3792: 3788: 3782: 3779: 3777: 3774: 3772: 3769: 3767: 3764: 3762: 3759: 3757: 3754: 3752: 3749: 3747: 3744: 3742: 3739: 3737: 3734: 3732: 3729: 3727: 3724: 3722: 3719: 3717: 3714: 3712: 3709: 3707: 3704: 3702: 3699: 3697: 3694: 3692: 3691:Library files 3689: 3687: 3684: 3682: 3679: 3677: 3674: 3672: 3669: 3667: 3664: 3662: 3659: 3655: 3652: 3650: 3647: 3646: 3645: 3642: 3640: 3637: 3635: 3632: 3630: 3627: 3625: 3622: 3621: 3619: 3617: 3613: 3607: 3604: 3602: 3599: 3597: 3594: 3592: 3589: 3587: 3584: 3582: 3579: 3577: 3574: 3572: 3569: 3567: 3564: 3562: 3559: 3557: 3554: 3552: 3549: 3547: 3544: 3542: 3539: 3537: 3534: 3532: 3529: 3527: 3524: 3522: 3519: 3517: 3514: 3512: 3509: 3507: 3504: 3502: 3499: 3497: 3494: 3492: 3489: 3488: 3486: 3484: 3480: 3474: 3471: 3469: 3466: 3462: 3459: 3457: 3454: 3452: 3451:Reparse point 3449: 3447: 3444: 3442: 3439: 3437: 3434: 3433: 3432: 3429: 3427: 3424: 3422: 3419: 3417: 3414: 3412: 3409: 3407: 3404: 3403: 3401: 3399: 3395: 3389: 3386: 3384: 3381: 3379: 3376: 3374: 3371: 3369: 3366: 3364: 3361: 3359: 3356: 3354: 3351: 3350: 3348: 3346: 3342: 3336: 3333: 3331: 3328: 3326: 3323: 3321: 3318: 3316: 3313: 3309: 3306: 3304: 3301: 3299: 3296: 3294: 3291: 3289: 3286: 3285: 3284: 3281: 3279: 3276: 3274: 3271: 3269: 3266: 3264: 3261: 3259: 3256: 3254: 3253:Action Center 3251: 3250: 3248: 3246: 3242: 3236: 3233: 3231: 3228: 3226: 3223: 3221: 3218: 3216: 3213: 3211: 3208: 3206: 3203: 3201: 3198: 3196: 3193: 3191: 3188: 3186: 3183: 3181: 3180:Snipping Tool 3178: 3176: 3173: 3171: 3168: 3166: 3163: 3161: 3158: 3156: 3153: 3151: 3148: 3146: 3143: 3141: 3138: 3136: 3133: 3131: 3128: 3126: 3123: 3121: 3118: 3116: 3113: 3111: 3108: 3104: 3101: 3100: 3099: 3096: 3094: 3091: 3089: 3086: 3084: 3081: 3079: 3076: 3074: 3071: 3069: 3066: 3064: 3061: 3059: 3056: 3054: 3051: 3049: 3046: 3044: 3041: 3039: 3038:Character Map 3036: 3034: 3031: 3029: 3026: 3024: 3021: 3019: 3016: 3015: 3013: 3011: 3007: 3001: 2998: 2996: 2993: 2989: 2986: 2985: 2984: 2981: 2979: 2976: 2974: 2971: 2969: 2966: 2964: 2961: 2959: 2956: 2954: 2951: 2949: 2946: 2944: 2941: 2939: 2936: 2934: 2931: 2929: 2926: 2924: 2921: 2919: 2916: 2914: 2911: 2909: 2906: 2904: 2901: 2899: 2896: 2894: 2891: 2889: 2886: 2884: 2881: 2879: 2876: 2874: 2871: 2869: 2866: 2864: 2861: 2859: 2858:Control Panel 2856: 2854: 2851: 2849: 2848:App Installer 2846: 2845: 2843: 2837: 2831: 2828: 2826: 2823: 2819: 2816: 2814: 2811: 2810: 2809:Architecture 2808: 2806: 2803: 2802: 2799: 2795: 2788: 2783: 2781: 2776: 2774: 2769: 2768: 2765: 2758: 2755: 2752: 2749: 2747: 2744: 2741: 2738: 2735: 2732: 2730: 2729: 2725:, Microsoft, 2724: 2721: 2719: 2716: 2714: 2710: 2707: 2705: 2701: 2698: 2696: 2692: 2689: 2686: 2682: 2679: 2677: 2673: 2670: 2668: 2665: 2662: 2659: 2657: 2653: 2650: 2648: 2645:, Microsoft, 2644: 2641: 2640: 2636: 2630: 2627:, Microsoft, 2626: 2621: 2618: 2615: 2612:, Microsoft, 2611: 2606: 2603: 2600: 2597:, Microsoft, 2596: 2591: 2588: 2585: 2582:, Microsoft, 2581: 2576: 2573: 2570: 2567:, Microsoft, 2566: 2561: 2558: 2555: 2550: 2547: 2544: 2539: 2536: 2532: 2528: 2523: 2520: 2516: 2515: 2510: 2505: 2502: 2499: 2495: 2490: 2487: 2484: 2480: 2475: 2472: 2469: 2465: 2460: 2457: 2454: 2451:, Microsoft, 2450: 2445: 2442: 2439: 2436:, Microsoft, 2435: 2430: 2428: 2424: 2421: 2418:, Microsoft, 2417: 2412: 2409: 2406: 2402: 2397: 2394: 2390: 2386: 2383: 2378: 2375: 2372: 2368: 2364: 2361: 2356: 2353: 2350: 2347:, Microsoft, 2346: 2341: 2338: 2335: 2332:, Microsoft, 2331: 2326: 2323: 2320: 2317:, Microsoft, 2316: 2311: 2308: 2305:Spreadsheets. 2304: 2300: 2297:, Microsoft, 2296: 2291: 2289: 2285: 2282: 2279:, Microsoft, 2278: 2273: 2270: 2267: 2264:, Microsoft, 2263: 2258: 2256: 2252: 2249: 2246:, Microsoft, 2245: 2240: 2238: 2236: 2234: 2230: 2227: 2226: 2222:, Microsoft, 2221: 2216: 2214: 2210: 2207: 2204:, Microsoft, 2203: 2198: 2196: 2192: 2189: 2186:, Microsoft, 2185: 2180: 2177: 2174: 2171:, Microsoft, 2170: 2165: 2163: 2159: 2156: 2153:, Microsoft, 2152: 2147: 2145: 2141: 2138: 2135:, Microsoft, 2134: 2129: 2126: 2123: 2120:, Microsoft, 2119: 2114: 2112: 2110: 2108: 2104: 2101: 2098:, Microsoft, 2097: 2092: 2089: 2086: 2083:, Microsoft, 2082: 2077: 2074: 2071: 2069: 2065:, Microsoft, 2064: 2059: 2056: 2053: 2050:, Microsoft, 2049: 2044: 2041: 2038: 2035:, Microsoft, 2034: 2029: 2027: 2025: 2021: 2015: 2011: 2008: 2006: 2003: 2002: 1998: 1991: 1985: 1983: 1979: 1978: 1976: 1971: 1968: 1967: 1965: 1964: 1963: 1961: 1953: 1945: 1941: 1938: 1934: 1931: 1927: 1924: 1920: 1919: 1918: 1912: 1909: 1908:Administrator 1905: 1901: 1900: 1899: 1893: 1891: 1889: 1883: 1880: 1877: 1869: 1865: 1861: 1856: 1852: 1850: 1846: 1842: 1838: 1833: 1831: 1827: 1823: 1821: 1816: 1809: 1803: 1793: 1788: 1783: 1776: 1775: 1761: 1754: 1751: 1748: 1745: 1739: 1738: 1736: 1733: 1726: 1725: 1720: 1718: 1716: 1711: 1707: 1705: 1700: 1694: 1692: 1685: 1683: 1679: 1658: 1657: 1654: 1648: 1647:Registry file 1644: 1640: 1635: 1633: 1629: 1620: 1618: 1608: 1605: 1604: 1583: 1582: 1579: 1573: 1571: 1568: 1566: 1558: 1556: 1553: 1545:REG_MULTI_SZ 1544: 1539: 1538: 1534: 1531: 1530: 1523: 1520: 1516: 1509: 1502: 1498: 1493: 1489: 1481: 1476: 1475: 1471: 1466: 1465: 1461: 1458: 1457: 1454: 1446: 1443: 1440: 1435: 1434: 1430: 1427: 1424: 1421: 1420: 1413: 1410: 1408: 1400: 1398: 1394: 1392: 1379: 1374: 1369: 1365: 1363: 1362: 1355: 1353: 1351: 1346: 1345: 1341: 1338: 1335: 1332: 1331: 1320: 1317: 1316: 1312: 1311: 1310: 1308: 1299: 1294: 1292: 1291: 1284: 1282: 1279: 1274: 1273: 1269: 1266: 1263: 1260: 1259: 1248: 1245: 1244: 1241: 1238: 1237: 1231: 1229: 1225: 1224: 1222: 1221: 1216: 1214: 1211: 1209: 1208: 1201: 1199: 1196: 1191: 1190: 1186: 1183: 1180: 1177: 1176: 1165: 1162: 1161: 1157: 1156: 1155: 1152: 1149: 1143: 1142: 1141: 1135: 1134: 1133: 1127: 1125: 1122: 1116: 1115: 1114: 1108: 1107: 1106: 1100: 1098: 1094: 1090: 1088: 1084: 1080: 1072: 1067: 1065: 1053: 1049: 1044: 1037: 1035: 1032: 1028: 1019: 1016: 1013: 1008: 1007: 1003: 1000: 997: 994: 993: 982: 976: 969: 967:Windows 95/98 966: 965: 961: 958: 957: 953: 950: 949: 945: 942: 941: 937: 935:Windows Vista 934: 933: 929: 926: 925: 921: 918: 917: 913: 910: 909: 906: 903: 893: 889: 888: 887: 884: 882: 873:0x95 or 0x91 872: 870:0x00 to 0xFF 869: 866: 861: 860: 856: 853: 850: 847: 846: 835: 829: 827: 807: 804: 801: 798: 797: 793: 790: 787: 784: 783: 775: 772: 769: 758: 743: 741: 738: 727: 724:mychanges.reg 721: 705: 703: 672: 669: 664: 662: 657: 655: 647: 640: 637: 635: 634: 630: 627: 624: 623: 619: 616: 613: 612: 609: 605: 602: 600:DRIVE_RAMDISK 599: 598: 594: 591: 588: 587: 583: 580: 577: 576: 572: 569: 566: 565: 561: 557: 554: 551: 550: 546: 543: 540: 539: 535: 532: 530:DRIVE_UNKNOWN 529: 528: 524: 521: 518: 517: 514: 508: 506: 495: 493: 489: 481: 479: 477: 473: 468: 466: 461: 454: 452: 450: 445: 442: 440: 431: 428: 420: 413: 412: 408: 405: 393: 390: 389: 387: 382: 376: 373: 370: 366: 363: 348: 345: 341: 339:in this area. 338: 334: 333: 332: 330: 325: 323: 316: 314: 310: 306: 300: 293: 286: 284: 276: 274: 272: 268: 262: 260: 251: 249: 246: 242: 239: 233: 232:Windows Vista 228: 221: 216: 209: 207: 205: 200: 196: 194: 186: 181: 179: 175: 174:context menus 171: 165: 160: 158: 154: 149: 145: 140: 138: 134: 131: 127: 123: 113: 110: 102: 91: 88: 84: 81: 77: 74: 70: 67: 63: 60: – 59: 55: 54:Find sources: 48: 44: 38: 37: 32:This article 30: 26: 21: 20: 4476:File Manager 4316:Photo Viewer 4251:Media Center 4211:Groove Music 4141:Address Book 4112: 4105: 4098: 4093:Purble Place 4091: 4084: 4077: 4070: 4063: 4058:Chess Titans 4056: 4049: 4036:Discontinued 4024: 4017: 3716:Ntoskrnl.exe 3624:Boot Manager 3616:Architecture 3506:Group Policy 3398:File systems 3298:Saved search 3267: 3205:Sticky Notes 3170:Quick Assist 3098:Media Player 3068:Feedback Hub 3063:Fax and Scan 2958:Task Manager 2888:Event Viewer 2868:Disk Cleanup 2726: 2712: 2703: 2694: 2684: 2675: 2655: 2647:MSDN Library 2646: 2628: 2620: 2613: 2605: 2598: 2590: 2583: 2575: 2568: 2560: 2549: 2538: 2531:The Register 2530: 2522: 2514:The Register 2512: 2504: 2497: 2489: 2482: 2474: 2467: 2459: 2452: 2444: 2437: 2419: 2411: 2396: 2377: 2370: 2355: 2348: 2340: 2333: 2325: 2318: 2310: 2298: 2280: 2272: 2265: 2247: 2223: 2205: 2188:MSDN Library 2187: 2179: 2172: 2154: 2137:MSDN Library 2136: 2128: 2122:MSDN Library 2121: 2100:MSDN Library 2099: 2091: 2085:MSDN Library 2084: 2076: 2066: 2058: 2051: 2043: 2036: 1957: 1916: 1897: 1884: 1881: 1873: 1834: 1824: 1817: 1813: 1749: 1746: 1743: 1721:Other issues 1712: 1708: 1701: 1698: 1689: 1680: 1677: 1636: 1624: 1615: 1606: 1577: 1569: 1565:Group Policy 1562: 1554: 1550: 1517: 1510: 1506: 1487: 1452: 1404: 1395: 1390: 1383: 1306: 1303: 1227: 1153: 1150: 1147: 1139: 1131: 1123: 1120: 1112: 1104: 1095: 1091: 1082: 1078: 1070: 1068: 1057: 1048:Group Policy 1038:Group Policy 1033: 1029: 1025: 959:Windows 2000 904: 900: 885: 878: 813: 770: 759: 747: 739: 728: 709: 673: 667: 665: 660: 658: 651: 578:DRIVE_REMOTE 525:Description 512: 496: 492:Group Policy 485: 475: 469: 464: 462: 458: 446: 443: 435: 400:shellexecute 369:double-click 328: 326: 318: 302: 294: 287: 280: 265:handling in 263: 255: 247: 243: 236: 230:AutoPlay in 218:AutoPlay in 201: 197: 182: 177: 161: 141: 121: 120: 105: 96: 86: 79: 72: 65: 53: 41:Please help 36:verification 33: 4491:Minesweeper 4460:Spun off to 4281:MSN Dial-up 4276:Movie Maker 4181:Diagnostics 4131:ActiveMovie 3873:COMMAND.COM 3751:Shadow Copy 3606:Server Core 3446:Mount Point 3373:Shadow Copy 2968:Windows Ink 2740:AutoRunConf 2010:autorun.inf 1982:System BIOS 1837:Huawei E220 881:hexadecimal 805:0x03FFFFFF 666:A Registry 659:A Registry 589:DRIVE_CDROM 567:DRIVE_FIXED 509:Drive types 472:autorun.inf 439:drive types 189:autorun.inf 169:autorun.inf 4471:DVD Player 4286:NetMeeting 4186:DriveSpace 4051:3D Pinball 3551:SharePoint 3315:Start menu 3160:Phone Link 3023:Calculator 2978:PowerShell 2839:Management 2016:References 1849:anti-virus 1763:Entry name 1704:activation 1535:Data type 1532:Entry name 1501:Windows 98 1459:Data value 1441:REG_DWORD 1422:Entry name 1368:non-volume 1333:Entry name 1280:REG_DWORD 1261:Entry name 1197:REG_DWORD 1178:Entry name 1081:or set to 1052:Windows XP 1014:REG_DWORD 995:Entry name 951:Windows XP 867:REG_DWORD 848:Entry name 731:GPEdit.msc 700:HKEY_USERS 692:HKEY_USERS 638:0x00000009 628:0x00000008 617:0x00000007 603:0x00000006 592:0x00000005 581:0x00000004 570:0x00000003 555:0x00000002 544:0x00000001 533:0x00000000 425:See also: 271:Windows 10 222:and later 164:Windows XP 144:Windows 95 69:newspapers 4266:Messenger 4261:Messaging 4191:DVD Maker 4161:CD Player 4156:CardSpace 4107:Solitaire 3807:BitLocker 3802:AppLocker 3436:Hard link 3325:Task View 3303:Namespace 3273:ClearType 3093:Messaging 3078:Magnifier 3043:Clipchamp 3018:3D Viewer 2299:Downloads 1960:Conficker 1868:Windows 7 1864:in action 1860:Conficker 1830:emulating 1766:Data type 1499:drive on 1425:Data type 1336:Data type 1264:Data type 1193:NoAutoRun 1181:Data type 1089:section. 1031:drive Z. 998:Data type 919:Windows 7 851:Data type 757:any way. 720:text file 519:Type name 267:Windows 7 220:Windows 8 58:"AutoRun" 4536:Category 4510:Category 4387:MS-DOS 7 4372:ScanDisk 4291:NTBackup 4171:Contacts 4151:Cardfile 4086:Hold 'Em 4065:FreeCell 3911:VBScript 3822:Defender 3790:Security 3776:Winlogon 3731:Registry 3345:Services 3278:Explorer 3263:AutoPlay 3150:Paint 3D 3135:OneDrive 3125:Narrator 3073:Get Help 3028:Calendar 2923:Settings 2893:IExpress 2728:Tweak UI 2385:Archived 2363:Archived 2005:AutoPlay 1999:See also 1948:KB971029 1820:Sony BMG 1639:INI file 1600:000000ff 1462:Meaning 1431:Default 1405:Certain 1370:devices. 1342:Default 1270:Default 1187:Default 1079:Disabled 1004:Default 857:Default 735:gpmc.msc 654:database 608:RAM disk 406:section. 385:process. 349:Sends a 259:Registry 238:AutoPlay 210:AutoPlay 178:AutoPlay 126:AutoPlay 99:May 2024 4486:Mahjong 4407:Interix 4341:WinHelp 4241:Journal 4231:Imaging 4079:InkBall 3965:DirectX 3928:ActiveX 3916:JScript 3629:Console 3601:Hyper-V 3496:Domains 3320:Taskbar 3293:IFilter 3268:AutoRun 3230:WordPad 3225:Weather 3140:OneNote 3130:Notepad 3053:Cortana 2928:Sysprep 2405:US-CERT 2349:TechNet 2334:TechNet 2319:TechNet 2281:TechNet 2266:TechNet 2225:TechNet 2070:Library 1944:patched 1772:Default 1628:malware 1444:0 or 1 1437:AutoRun 1386:⇧ Shift 1384:If the 1071:Enabled 716:reg.exe 712:regedit 367:Alters 311:from a 307:, with 204:volumes 137:mounted 122:AutoRun 83:scholar 4519: 4508: 4481:Hover! 4355:Others 4336:Travel 4331:Syskey 4114:Tinker 4072:Hearts 4000:WinUSB 3985:WinAPI 3970:Native 3781:WinUSB 3706:MinWin 3483:Server 3283:Search 3195:Sports 3165:Photos 3155:People 3033:Camera 1988:823732 1876:action 1845:script 1790:0 or 1 1785:REG_SZ 1497:CD-ROM 465:except 329:volume 241:user. 155:") in 148:CD-ROM 85: 78: 71: 64: 56: 4447:WinFS 4346:Write 4043:Games 4010:Games 3883:WoW64 3711:NTLDR 3701:LSASS 3634:CSRSS 3441:links 3416:exFAT 3245:Shell 3210:Store 3200:Start 3190:Skype 3145:Paint 3120:Money 3048:Clock 2995:WinRE 2903:Netsh 2841:tools 2830:Games 2303:Excel 1930:above 1862:worm 1769:Range 1594:dword 1428:Range 1339:Range 1267:Range 1184:Range 1064:above 1001:Range 970:0x95 962:0x95 954:0x91 946:0x95 938:0x91 930:0x91 922:0x91 854:Range 808:0x95 799:0x08 668:value 522:value 381:Shift 344:below 269:. In 90:JSTOR 76:books 4521:List 4402:HPFS 4166:Chat 4124:Apps 4026:Surf 3975:.NET 3943:DCOM 3771:WHEA 3766:USER 3756:SMSS 3546:WSUS 3526:MSMQ 3468:ReFS 3431:NTFS 3406:CDFS 3363:CLFS 3358:BITS 3258:Aero 3235:Xbox 3215:Tips 3103:2022 3088:Maps 3083:Mail 3058:Edge 3010:Apps 2805:APIs 2068:MSDN 1935:Use 1858:The 1391:left 1046:The 1020:0x0 764:and 752:and 748:The 696:HKCU 688:HKCU 686:and 684:HKLM 501:and 476:only 396:open 337:bugs 313:blog 62:news 4301:Pay 4201:Fax 3948:OLE 3923:COM 3906:WSH 3893:API 3654:DLL 3649:EXE 3561:PWS 3541:IIS 3501:DNS 3473:UDF 3461:EFS 3456:TxF 3426:FAT 3421:IFS 3411:DFS 3000:WMI 1643:API 661:key 398:or 362:COM 185:dll 45:by 4538:: 2818:NT 2813:9x 2711:, 2702:, 2693:, 2683:, 2674:, 2654:, 2529:, 2511:, 2496:, 2481:, 2466:, 2426:^ 2403:, 2369:, 2301:, 2287:^ 2254:^ 2232:^ 2212:^ 2194:^ 2161:^ 2143:^ 2106:^ 2023:^ 1870:. 1826:U3 1513:F5 1447:1 1228:or 737:. 702:. 694:, 562:) 494:. 441:. 379:⇧ 324:. 283:OS 139:. 2786:e 2779:t 2772:v 1925:) 1795:0 1666:= 1663:@ 1597:: 1591:= 1503:. 1478:1 1468:0 346:. 112:) 106:( 101:) 97:( 87:· 80:· 73:· 66:· 39:.

Text is available under the Creative Commons Attribution-ShareAlike License. Additional terms may apply.