1. Get a U3-enabled flash drive, and replace the built-in autorun software with a home-made autorun.inf
   • (you probably want to write/find some code that will find the read/write drive, and run over there instead, since your autorun will initially be running from a very small read-only drive)
2. In Windows XP Service Pack 2, the AutoPlay behavior changed quite a bit. Now when you insert some media, Windows will pop up a dialog asking you to choose which action to perform.
   • documentation:
     • microsoft
   • example autorun.inf's:
     • DailyCupOfTech (search for "Autorun Dabbler's Toolkit")
     • Tongue and Groove
   • Registry keys:
     • HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoRun. UI's for this:
       • Specific drives can be disabled from running Autorun using TweakUI (My Computer\AutoPlay\, screenshots)
       • Group Policy editor (run gpedit.msc)
         • User Configuration\Administrative Templates\System\Turn off Autoplay
         • Computer Configuration\Administrative Templates\System\Turn off autoplay
     • HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\UserChosenExecuteHandlers\ — per-drive defaults
       • in Explorer.exe, right-click on a drive, Properties, AutoPlay tab
     • HKLM\System\CurrentControlSet\Services\Cdrom\Autorun
     • HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\MEDIA CENTER\AutoPlayHandlers\
3. There are a ton of crappy VB tray apps out there that scan a drive whenever it's plugged in, and will trigger its autorun. (this of course requires some extra pre-existing setup)
   • (yeah, and how many of them will autorun your media when the computer is locked? heheheh...)
4. Use social engineering to get someone to manually run the executable
   • fake folder (background)
   • passwords.exe

viruses

• apparently virus authors have put some thought into figuring out how to make autorun best run from USB (obviously this is a bad thing when they do it, but a good thing if it makes my job easier)