EH-Net

Hai,

I am new to Ethical Hacking. I am working in small company. Now i am facing one problem in my office that is when the user try to open the drive D: or E: it automatically open the windows media player. I referred my friend he told me to format the drive. But i unable to format the drive because the user having the lot of official data in it. unable to move to other partition also. Pls give me the solution without data loss.
Thanks...

Hi,
I know it's a bit of a smart alec response, but I think it's still valid:
Have you considered using anti-virus software? :-)
If you can, run it from a Live CD or floppy so that if there's malware on the Windows box, it won't be resident in memory when you do the scan.

Can you give some more details in relation to the problem? Is the D:\ or E:\ drive a CD drive, or thumb drive? How do you know that malware exists on the media? Have you been alerted by an anti-virus program? If you kill Windows Media Player, does it keep popping back up? Have you tried disabling AutoRun?

If you think there's a malware issue, try following the instructions for removal from your anti-virus vendor. Often, you can disable system restore, reboot to safe mode, and use a combination of anti-virus and anti-malware programs to try and clean the infected site. Let us know if you have any other questions.

You might try disabling autoplay for the device

http://www.base40.com/cdtTipAutoRun.htm

When adding a removable device to windows it initially prompts you for a default activity to perform when accessing the drive. It could be that you've just got WMP as the default action for the drive. I'm sure with a little googling you can change the default behaviour.

Jimbob