As people said, auto run was the default, but there were systems in place to prevent silent or malicious software from auto-installing. Sony basically coded a virus rootkit that circumvented the Windows security mechanisms, as well as the mechanisms of all the popular 3rd party anti-virus programs. They knew what they were doing was fucked up, but they don't care.