The AutoPlay feature, built into Microsoft Windows operating systems, will begin reading a device as soon as it is inserted. Often this is done using the autorun.inf file. This file will specify to Windows what application(s) to launch within the device. It would be very easy for someone to modify the autorun.inf file to launch a malicious application.
It is a best practice to disable AutoPlay completely. To do so, follow these steps from your Windows 7 system:
1. Click Start and type "gpedit.msc" in the search box.
2. Navigate to Computer Configuration > Administrative Templates > Windows Components > AutoPlay Policies.
3. Then find the policy called "Turn off AutoPlay".
4. Select the "Enabled" radio button.
5. Close all windows.
You may need to reboot your machine for the changes to take effect.
Posted by
Mike Wright