Earlier this year we posted on this blog about the continued rise of malware that exploits the Windows AutoRun feature to replicate onto removable media, such as USB thumb drives.  As we saw just a couple of weeks ago, a UK local government body suffered significant problems and incurred high costs as a result of a Conficker infection, which uses this exploit.

Of course, our Cruzer Enterprise flash drives with onboard McAfee antivirus scanning are able to stop this kind of malware spreading via USB, because they will quarantine and destroy the malware if copied onto the drive. 

But it’s also worth a reminder that that many other types of portable storage devices are also vulnerable to AutoRun malware.  This includes mp3 players, digital cameras and even digital picture frames.  While disabling Windows AutoRun is possible, it’s also inconvenient for users to manually launch a portable device or program they may need. 

We would suggest exercising extreme caution in allowing any unauthorised devices to be used on the corporate network, and ensuring that antivirus software and software patches are kept fully up to date.  These measures will help to minimise any risks.

A major health organization in North East England, NHS South of Tyne and Wear, has deployed 800 SanDisk Cruzer Enterprise secure flash drives as part of a layered approach to device security.

The organisation has responded to UK Government drives for improved data security in the public sector, and is using FrontRange Solutions’ Device Wall to control the transfer of information to encrypted devices, alongside McAfee endpoint encryption and the SanDisk USB pen drives.

It has replaced 800 flash drives with the encrypted devices and once port control across all endpoints is enabled, staff will only be able to use their authorised, issued drive.

Network Products Guide, an industry-leading publication on information technologies and solutions, has named the Cruzer Enterprise with McAfee as a winner of its 2009 Product Innovation Awards, in the Portable Media category.

These awards recognize vendors whose innovative products bring essential changes to the information technology industry.  The Cruzer Enterprise with McAfee, introduced in October 2008, was the first USB security solution with onboard anti-virus scanning, protecting against worms, viruses and trojans that spread via removable storage media.

This capability is now a key element in endpoint and network security, thanks to the growth in malware which spreads via removable storage, including the Downadup / Conficker worm.