Re: Autorun in screensaver

Hi Ricci,
   That really depends on your environment. I know for a fact that you can 
craft an autorun program in Windows 9x (Probably ME too) that will run with 
the credentials of the logged-on user and will execute even while the 
computer is "locked" in screensaver. I can confirm it works with CDROMs and 
USB disks. Seems like MS would have disabled it in 2k/XP though, not to 
mention the servers. 

On Monday 08 May 2006 15:39, ricci@cs.ust.hk wrote:
> Hello All,
>
> I'm conducting a security assessment and suddenly I got an interesting
> question. When I inserted an USB hard disk with screensaver turned on, I
> can see that my hard disk has been enabled and autoplay must have been
> executed. However, can an autorun program be executed when screensaver
> turned on? Is there any way that I can make the autorun executed even with
> screensaver turned on?
>
> Please advise.
>
> Thx.
>
> Ricci
>
>
> ---------------------------------------------------------------------------
> ---------------------------------------------------------------------------

-- 
//Begin sig

Aaron Phillips
Technician, SYSTECH Computers
989-743-4296

I sign all of my messages with a PGP Public Key using the Open Source version 
of PGP, GNU Privacy Guard. More information is available at the website 
http://www.gnupg.org/

My public key is available for import on hkp://subkeys.pgp.net and also 
http://www.systech-computers.com/keys

//End sig

pgpxda0JRNi8c.pgp
Description: PGP signature