Monday, October 18, 2010

Autorun in Mac OS X!

As if we didn't have enough problems with Autorun in Windows, I noticed the same behaviour with Mac OS X today. The culprit - Huawei modem manager - launched from my USB Internet Stick thingie.

The USB stick mounts a volume called Mobile Partner when inserted into my Mac. Inside the volume is an application called Mobile Partner.app. Looking into its Mobile Partner.app/Contents/Info.plist file, I noticed the following lines:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>CFBundleDevelopmentRegion</key>
<string>English</string>
<key>CFBundleExecutable</key>
<string>AutoOpen</string>
<key>CFBundleGetInfoString</key>
<string>1.9</string>
Notice the property which says CFBundleExecutable = AutoOpen. There you have it. The same annoyance as Windows' Autorun.

Here begins my quest for a method to disable AutoOpen in Mac's Finder. If not, Macs (and Steve Jobs), welcome to the world of USB malware.