Hi,
Considering new class of worms like flame which can run undetcted for months/years, I want to know can they still infect computers via USB stick and if computers have up-to-date windows 7(professional/ultimate) with default securty setting(i.e. auto run for applications will first ask user) and up-to-dated Norton internet security , if user does not run any program from them intentionally and just copy some files from his/her computer to the usb flash disk ?
To my limited security knowledge, if a worm wants to enter a computer via a usb stick (and if the user does not intentionally run any program from that) the only way is to modify .inf file and run an infected program via auto run but my question is first are there other ways ? can norton internet security detect them ? ( I emphasize that if their patterns are still not included in virus/worm database). If they do so then I can assume they can easily infect all intranet computers which are in trusted intranet.
is it necessary that admin disables all the usb ports in the intranet computers for maximum security ?
thanks.