This is one security problem that everyone should know. To define in short, by the word itself, it automatically launch application when CD, USB Drive or any devices inserted on the computer. Trojan drops files on a drive especially the autorun.inf which points to an executable file that will be run everytime the drive will be browse.

In a corporate environment, administrators can enforce this feature thru Group policy. More details on Steve Riley’s blog:

In Windows Vista/Server 2008, go here:

Computer Configuration | Administrative Templates | Windows Components | AutoPlay Policies

Enable the “Default behavior for AutoRun” policy and set the default to “Do not execute any autorun commands.”

Enable the “Turn off Autoplay” policy and set it to “All drives.”

In Windows XP/Server 2003, go here:

Computer Configuration | Administrative Templates | System

Enable the “Turn off Autoplay” policy and set it to “All drives.”