Media Auto run
The Media Auto Run is turning on automatically , it's doing the same even i reinstalled windows & the bitdefender product. Disabling it does not work more than few days , why?😱
Answers
-
Hi @Rock.87,
From what I hear, this is already a known issue currently under investigation.
Thanks for bringing this to our attention. 👍️
Regards
Premium Security & Bitdefender Endpoint Security Tools user
1 -
I cannot reproduce the issue.
The Media Auto Run is turning on automatically
It is off in Control Panel>Autoplay or Windows Settings>Devices>Autoplay? Or it is the event that appears in the Bitdefender Notifications?Disabling it does not work more than few days , why?
How did you disabled it? Directly from the Settings or Control Panel, or by clicking Fix issue in Bitdefender Notifications? If clicked Fix Issue the Media autorun is enabled should have been turned green and another event Media autorun is disabled should have been appear, so I suppose it is from Windows settings? (Unless you hit a bug, this is why I would like to know exactly what steps you did).
1 -
@camarie thx for your kind attention , the media auto run was switched off in the windows settings
Afterwards in the bitdefender , there are no alerts in the notification panel about that , i find switching media auto run to off recommendation right inside the settings:
i just fixed it few days ago and the recommendation is here again.
0 -
You might hit a some sort of bug, although I am unable to reproduce it yet. We have an issue filed for now and we will continue hunting it, although I tried various scenarios and I am yet unable to repro.
I will probably need some more details as the investigation continues, if that is ok for you.
0 -
i would be glad to help you plz let me know what sort of favor do u want ?
0 -
At this time just to confirm me (or not) if these are the steps:
- installed/updated the product
- a vulnerability scan (manual? automatic?) was executed and generated a Media autorun is enabled notification event in Notifications
- disabled Autoplay from Windows > Settings
- was there another manual vulnerability scan executed?
The reason I am asking in so much detail is this: the notification that results from a previous scan remain. The fact that the setting was changed in Windows does not make the notification dissapear, since it is needed another scan to update the status of autorun (we are not actively monitoring the status of this setting, just scan and taking a snapshot of the situation at a given point in time).
It might be like this. The current logic is that either an automatic scan or the user invokes a manual scan, the scanner detects the issue (Media autoplay enabled), the user sees in the scan result the issue and press Fix Issue (the same thing can be done also directly from the generated notification if clicked on it to expand). What happens in this moment is another scan - but this time only for the issue to fix - executes, and the scanner 1. generates another notification about the fixed issue and 2. mark the previous issue (the one you are seeing) as Fixed and it becomes green. In both cases, the previous notification does not dissapear, it will only be marked as Fixed.
So I would like you to try (I will do this as well) to go in Notifications, expand the Media auto notification, and click Fix Issue (or rerun the Vulnerability Scan in its entirety if you so choose, but is simpler to just click on fix issue). The expected result is that another notification about the issue been fixed (Media autorun disabled) to appear and also mark the previous one as green (fixed). Even if the current status of Autoplay is already disabled, a rerun of the scan will force re-detection.
I did reproduced this scenario - if this is indeed how it behaves also on your particular setup and it is not something else happening. If that is the case, I suppose some improvement can be done here (in no particular order):
- monitor the autoplay status (it will not impose performance penalties) either by monitoring the setting or simply just polling it every now and then
- if a Media autorun is enabled issue exists and the setting was changed externally, mark the issue as fixed (while still letting the event exists since that was generated at that time) or just rerun the scanner only for that issue as if Fix Issue was invoked (to avoid doing the same code in multiple places and have a consistent way of scanning, changing only the necessity to invoke it not only periodically or at user request, but from detection the fact the setting changed since the time when the issue has been detected).
That would work for a simple setting like Autoplay; doing this for the entire range of scanners would prove too costly - although this would be the correct way of doing it (do scan 1 at moment T1, then another scan 2 at moment T2 and compare the snapshots) - this is the main reason the automatic scans are run at most daily (some of them weekly) and prefer to let the user just be aware of potential issues, while letting the manual scan to display and let the greater control to the user. I hope this makes sense and not being too convolute (something I am prone to do, I admit).
1 -
Got it. We'll continue from here.
1