Hi Ricci,
That really depends on your environment. I know for a fact that you can
craft an autorun program in Windows 9x (Probably ME too) that will run with
the credentials of the logged-on user and will execute even while the
computer is "locked" in screensaver. I can confirm it works with CDROMs and
USB disks. Seems like MS would have disabled it in 2k/XP though, not to
mention the servers.

On Monday 08 May 2006 15:39, ricci (at) cs.ust (dot) hk [email concealed] wrote:
> Hello All,
>
> I'm conducting a security assessment and suddenly I got an interesting
> question. When I inserted an USB hard disk with screensaver turned on, I
> can see that my hard disk has been enabled and autoplay must have been
> executed. However, can an autorun program be executed when screensaver
> turned on? Is there any way that I can make the autorun executed even with
> screensaver turned on?
>
> Please advise.
>
> Thx.
>
> Ricci
>
>
> ------------------------------------------------------------------------
---
> ------------------------------------------------------------------------
---

--
//Begin sig

Aaron Phillips
Technician, SYSTECH Computers
989-743-4296

I sign all of my messages with a PGP Public Key using the Open Source version
of PGP, GNU Privacy Guard. More information is available at the website
http://www.gnupg.org/

My public key is available for import on hkp://subkeys.pgp.net and also
http://www.systech-computers.com/keys

//End sig
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQBEYNMbAHZHmpzlkVsRAvyoAJ94bPxKd9gaFetRlmnvaBZeMz8aewCfQgyo
pufJL6HFeGKGYdNbkWCFsGs=
=/bUR
-----END PGP SIGNATURE-----

[ reply ]