"Downadup" worm: MS Advice and CERT Correction

January 21, 2009 (Computerworld (http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9126478&source=NLT_SEC)) Microsoft Corp.'s advice on disabling Windows' "Autorun" feature is flawed, the U.S. Computer Emergency Readiness Team (US-CERT) said today, and it leaves users who rely on its guidelines to protect their PCs against the fast-spreading Downadup worm open to attack.

In an alert issued on Monday, US-CERT said Microsoft's instructions on turning off Autorun are "not fully effective" and "could be considered a vulnerability."

The US-CERT site (http://www.us-cert.gov/cas/techalerts/TA09-020A.html) has a full description of how to disable Autorun properly.