When is AUTORUN.INF really an AUTORUN.INF?

[Chewy]

http://www.f-secure.com/weblog/archives/00001575.html

USB worms work by creating a file called AUTORUN.INF on the root of USB drives. These INF files then use Autorun or Autoplay (not the same thing!) to execute themselves either when the stick is inserted, or more commonly, when the user double-clicks on the USB drive icon from My Computer (Windows Explorer)...

Keeping Autorun enabled on USB and other removable drives has become a significant security risk due to the increasing number of malware variants that can infect them and transfer the infection to your computer.

https://forums.symantec.com/syment/blog/article?message.uid=366902

http://miekiemoes.blogspot.com/2008/11/please-disable-autorun-asap.html

thanks to quietman7(MVP/security) for these links

[drfsupercenter]

I have an autorun.inf on my flash drive... but all it does is change the Volume Label to "Danny's Flash Drive" and gives it a cool icon.

http://i43.tinypic.com/25722ww.png