bug was fixed in a number of security updates, detailed in Microsoft Knowledge Base article 967715. Other issues Attack vectors AutoRun functionality has been used as a malware vector for some time. Prior to Windows Vista, the default action with a CD-ROM drive type was to follow any autorun.inf file instructions without prompts or warnings. This makes rogue CD-ROMs one possible infection vector. In the same category are mixed content CD-ROMs. An audio CD, that a user would not expect to contain software at all, can contain a data section with an autorun.inf. Some companies, such as Sony BMG, have used this vector to install malware that attempts to protect against copying of the audio tracks. U3 enabled flash drives, by emulating a CD-ROM unit, can also cause Windows to execute commands from the autorun.inf found on the emulated CD-ROM. Devices like the Huawei E220 HSDPA modem validly use this method to autoinstall drivers for the modem itself. However, plugging in a flash drive from an unknown source is an unwise move. USB Switchblade and similar tools have made U3 flash drive attacks trivial. Given the ease of writing script based attacks, anti-virus software may be ineffective in preventing data and password stealing. With a standard flash drive, social engineering attacks can be employed to entice a user to click on the appropriate item in the AutoPlay dialog. An alluring action string promising free games or pornography would lure many users into the trap. At any time, double clicking on the drive icon will use the autorun.inf automatically, a trap more advanced users could fall into. Any user can configure AutoPlay to make various decisions for them; by checking the appropriate box in the AutoPlay dialog, running flash drive malware becomes silent and automatic. AutoRun malware has been extended to use hard drives, picture frames and other digital devices. Care in dealing with external devices is a security priority. The prevalence of malware infection by means of AutoRun and USB flash drive was documented in a 2011 Microsoft study analyzing data from more than 600 million systems worldwide in the first half of 2011. The study found that 26 percent of all malware infections of Windows system were due to USB flash drives exploiting the AutoRun feature in Microsoft Windows. That finding was in line with other statistics, such as the monthly reporting of most commonly detected malware by antivirus