I'm sure a few of you with U3 drives have heard of Gnu3izer and such for making your U3 drive Autorun anything. I have made a launcher for the CD portion of the drive that will run any commands in a file called usbgo.bat on your usb drive. The source is in Delphi. Is anyone interested in someting like this, as the .vbs included in Gnu3izer and Universal_Customizer can be blocked by some computers in "high security"? The CD images comes with Universal_Customizer, which I have had more luck with than Gnu3izer. I used it successfuly on a Memmorex 1gb usb travel drive.
http://www.sendspace.com/file/tpaf3s(old link)
http://eyecreate.googlepages.com/PortableApps-Universal_Customizer-de.rar
(corrected from below)
If anything is unclear, please ask me.
Visit the Community page
Join our forums
Subscribe to our email newsletter
Subscribe with RSS
Follow us on Facebook
Follow us on LinkedIn
Follow us on Twitter
Follow us on Mastodon
Follow us on BlueSky
What is it about the .vbs included in Gnu3izer and Universal_Customizer that is causing it to be blocked by secure computers?
Tim
Things have got to get better, they can't get worse, or can they?
Use this U3 replacement? Could you give a brief outline of using this?
Thanks in advance. Regards NMC
U3 is blocked on my workplace computer anyway.
I understand your difficultly, But my concern is the safety of the programs involved. If this involves the U3 Universal_Customizer I am thinking of, it looks like it was originally used to install malware/spyware on to U3 drives.
The question is, was it the method used to install spyware/malware, or did it contain the malware itself?
See:
http://www.hak5.org/wiki/USB_Switchblade
and
http://www.hak5.org/wiki/USB_Hacksaw
and
http://www.hak5.org/wiki/Universal_U3_LaunchPad_Hacker
and
http://www.hak5.org/forums/viewtopic.php?t=3437
The pre-packaged 'U3CUSTOM.ISO' file is the loader for the U3 SwitchBlade/Hacksaw.
My hope is that before this forum lends support to this that the programs and installers (if they are open source) are investigated.
Also, the link provided, which "(Link only availible for a few days)" does not inspire me with confidence either. I would think the poster should link to a site with which s/he could be more easily identified.
Tim
Things have got to get better, they can't get worse, or can they?
(it appears my first post was truncated?)
My hope is that before this forum lends support to this that the programs and installers (if they are open source) are investigated.
Also, the link provided, which "(Link only availible for a few days)" does not inspire me with confidence either. I would think the poster should link to a site with which s/he could be more easily identified.
Tim
Things have got to get better, they can't get worse, or can they?
But you put <s and >s which is HTML.
To put those in posts, you have to use < and >
I've fixed for you.
----
Ryan McCue
Person 1: Oh my god. You will never believe what just happened.
Person 2: What?
Person 1: I can't remember, I've forgotten.
"If you're not part of the solution, you're part of the precipitate."
it's the fact that it's a .vbs .
secured computers don't allow people to execute .vbs
not "installed" (authorized) by an admin and nor should they .
so it has nothing to do with what is in the .vbs
A real "secured" PC doesn't even allow execution of programs from
a removable media or mounting of new drives, so u3 wont work on one
unless it has been allowed by an admin.
sorry about the confusion. I know there are mixed sayings going around about this.
The U3 Customizer has no malware, the only malware is what you decide to put on yourself in the ISO. Those articles were writen with that intent, but it doesn't have to be that way. I do not want or like malware, and will try to make sure nothing I release has it. The problem with the .vbs was that some antivirus programs(namely Symantac) would stop the script, making it harder to use and less streamlined. Some people who may know less about computers would misataken it for malware too, becuase thier antivirus program tagged it, and that would be the end of thier "working" usb launcher. (btw, if U3 is blocked at your work, it could be either the autorun or the launcher, but I would suspect the autorun. In that case, none of these "autorun" launchers will work.) The U3CUSROM.iso file is generated with whatever content you want. The article mentions one with malware in it. Sorry about the temporary link, I can try to find a longer lasting one, but I put that in because the last time I posted a link hosted on sendspace, people couldn't use it after awhile.(new link will be on first post)
The ISO I have contains:
)
autorun.inf(required by Windows to start anything up)
Credits.txt(The name tells you what it is...
Universal_Cutomizer.zip(this is the base Universal Customizer package as I received it. For those who want it without modifications)
Autorunner.exe(This is my actual launcher I made. Source included in main 7z)
If you want anything more, just ask. I can be contacted by email, if you prefer, at eyecreate_at_gmail.com.I also have a webpage(not updated as much as it should)at eyecreate.googlepages.com
Nobody should start to undertake a large project. You start with a small _trivial_ project, and you should never expect it to get large. If you do, you'll just overdesign and generally think it is more important than it likely is at that stage. Or worse,
want a mirror or some other hosting, email me at cubegames[at]gmail.com
----
Ryan McCue
Person 1: Oh my god. You will never believe what just happened.
Person 2: What?
Person 1: I can't remember, I've forgotten.
"If you're not part of the solution, you're part of the precipitate."
I don't think I have a problem right now, but I will remember that for later. Thanks for your offer!
Nobody should start to undertake a large project. You start with a small _trivial_ project, and you should never expect it to get large. If you do, you'll just overdesign and generally think it is more important than it likely is at that stage. Or worse,
The U3Custom.iso included in your download in the "Universal_Cutomizer.zip" contains SPYWARE. You MUST REMOVE IT !!!
QUOTE
"The ISO I have contains:
autorun.inf(required by Windows to start anything up)
Credits.txt(The name tells you what it is...)
Universal_Cutomizer.zip(this is the base Universal Customizer package as I received it. For those who want it without modifications).
END QUOTE
THE ABOVE .zip CONTAINS SPYWARE!!!, WHY WOULD ANY LEGIT PERSON WANT IT
WHY WOULD ANY LEGIT PERSON DISTRIBUTE IT
Tim
Geek w/o portfolio
Things have got to get better, they can't get worse, or can they?
It's one of their projects, not cool indeed, but so be it. They've also got a whitehat version on their site applying all kinds of optimizations/security fixes to Windows pc's and undoing their own effects.
Anyway, I'm trying it out now - when you use his file simply delete that 'U3Custom.iso' and make your own by clicking the 'ISOCreate.cmd' file, you're safe after doing so.
Edit; I've tried it and it works like a champ, you'll need to add a new file to your USB drive though (right beside your 'StartPortableApps.exe'), containing:
Not So Be It!
My point is that he should not be posting a link to a file which contains SPYWARE in the first place. He should have removed the spyware .iso from the zip or he should not be posting it.
"when you use his file simply ..."
I will not use it, nor encourge anyone else to use it.
Links to files which contain SPYWARE should not be posted in this forum, or any other under any circumstances. It can only cause me to look upon the poster and the project with suspicion.
Tim
Geek w/o portfolio
Things have got to get better, they can't get worse, or can they?
The only thing in the .iso in the zip is this vbs script and a .doc file("Windows 2000 public key infrastructure"- Don't ask me, I didn't put it in there)The .vbs is this:
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set colDrives = objFSO.Drives
For Each objDrive in colDrives
If objDrive.DriveLetter"A" Then
If objFSO.FileExists(objDrive.DriveLetter & ":\go.cmd") Then
strPath = objDrive.DriveLetter & ":"
strcmd = """" & strPath & "\" & "go.cmd" & """"
CreateObject("Wscript.Shell").CurrentDirectory = strPath
CreateObject("Wscript.Shell").Run strcmd,0,False
End If
End If
Next
Other than that, I could find no REAL malware/spyware in it. The Universal Customizer I got was NOT related to the Hacksaw project and is why it doesn't have it in the .iso. If you think I missed something, than say so, but unless you can actually find the malware/spyware, please don't accuse it of having it.
I'll accept constructive criticism.
Thanks for the feedback LeftBlank, I'm glad someone got some good use from it.
Nobody should start to undertake a large project. You start with a small _trivial_ project, and you should never expect it to get large. If you do, you'll just overdesign and generally think it is more important than it likely is at that stage. Or worse,
From the source:
http://www.hak5.org/wiki/Universal_U3_LaunchPad_Hacker
Quote===
To Use
1. Download and Extract Universal Customizer 1.0.0.8 to the desktop or wherever you wish to install it.
2. Insert a U3 Drive into your PC.
3. Follow the on-screen instructions.
4. Done.
This computer application is not able to make a classic(normal) flash drive U3 compliant.
[edit]
Creating your own ISO
The pre-packaged 'U3CUSTOM.ISO' file is the loader for the U3 SwitchBlade/Hacksaw.
You might have to run this software 2 or more times before it works properly (you might get an error message) and manually put your files back on the flash drive and re-install your U3 software titles.
===End Quote
Also I posted the go.vbe from Your download to a scanning forum:
Panda detected:
Panda 9.0.0.4 01.25.2007 HackTool/HackSaw
Why do you seem to want defend yourself rather than just remove the offending U3Custom.iso that came in the Zip?
Remove it please.
Respectfully,
Tim
Things have got to get better, they can't get worse, or can they?
Instead of arguing, why not just make your own updater and .iso
The Universal Updater is nothing more than a hex edited version of Memorex's Updater.
You can do it yourself, instructions posted here.
U3Updater Instructions
Then create your own launcher or vbs script and add it to an ISO.
Or use my launcher, ISO is HERE
A word of caution the Memorex Updater, as well as the Universal Updater will format your U3 drive so back it up!!!
SmithTech
"Because they stand on a wall and say, 'Nothing is going to hurt you tonight. Not on my watch.'" (A Few Good Men)
Coincidence is God's way of remaining anonymous.(Albert Einstein)
Thank you SmithTech,
This was probably going to be my next point, and I was going to recommend your post in this group as a better way of doing things.
I have visited your site and followed your instruction.
They seem very easy to follow. I have not gone so far as to make or burn an iso because I am quite happy with my U3 Drive as it is.
It is much safer to do the work yourself and you provide links to all of the original sources, I appreciate that.
My point is that the poster should not be posting files that have a questionable background and could be dangerous, not that he himself is intending harm.
Tim
Geek w/o portfolio
Things have got to get better, they can't get worse, or can they?
Apparently my host doesn't like iso's so I had to zip it.
If you want the ISO, you can download it in a zip file HERE
SmithTech
"Because they stand on a wall and say, 'Nothing is going to hurt you tonight. Not on my watch.'" (A Few Good Men)
Coincidence is God's way of remaining anonymous.(Albert Einstein)
Alright, I took out the "original" iso, even though I can't see what's malicious with that .vbe script. The contents of the iso are the same without the zip file and the rar file has just the source and the hexedited memorex updater tool. I guess it safer to error on the side of mercy(aka take the debated iso out) than fuss with it's contents of which few will even look at. Link above updated. I hope everyone is happy.
Nobody should start to undertake a large project. You start with a small _trivial_ project, and you should never expect it to get large. If you do, you'll just overdesign and generally think it is more important than it likely is at that stage. Or worse,
Thanks, hopefully the fuzz will lie down now
Those people who are concerned with our saftey can be a real pain in the ass. How are we ever gonna spread crap if people actually check up on us. Just shut up, trust us, and download what we tell you to.
The above was sarcasm in case you missed it.
I thought that one of the main points of open source was that people could investigate programs and find problems.
BTW: this tread has lain dormant for 3 days, so the "fuzz/fuss" had laid/died down, till YOU woke it up.
stester - first time poster, thanks to you.
I've got to love the welcome atmosphere here on these forums, are there also people who will just be nice here?
I've never said safety doesn't matter, in fact not even close. I actually posted up that you should simply use your own ISO instead of the prepacked one - that way you've got basically no risk, especially not if you use his Delphi program, which is open source (and so is his hacksaw or whatever it's named project as well if I'm correct), unlike the Smithfield app...
your iso is pretty good too. Good work SmithTech!
Nobody should start to undertake a large project. You start with a small _trivial_ project, and you should never expect it to get large. If you do, you'll just overdesign and generally think it is more important than it likely is at that stage. Or worse,
I used your .iso with Universal Customizer on my Kingston U3 Flash Drive and it worked like a charm!!
-
There are only 10 types of people in the world: Those who understand binary, and those who don't. - Anonymous
i am comewhat confused this will allow me to run the portable apps suite instead of the U3 right and run other things but if i wanted too could i reinstall the U3 Lanch pad
yes, you can reinstall the original launchpad just make sure you find your company's .iso on some website...
-
There are only 10 types of people in the world: Those who understand binary, and those who don't. - Anonymous
You can also use UltraISO or another program to make your own ISO of the cd-rom partition of the U3 drive BEFORE you modify it and keep the ISO as a backup.
SmithTech
"Because they stand on a wall and say, 'Nothing is going to hurt you tonight. Not on my watch.'" (A Few Good Men)
Coincidence is God's way of remaining anonymous.(Albert Einstein)
Can I use my U3 drive's security feature with PortableApps menu?
Nope, that's (sadly) not (yet?) possible.
You can if you DO NOT replace the U3 Launchpad.
You can use my Shortcut Creator to add the Portable Apps Menu to the U3 launchpad, once you have the shortcut on the launchpad you can set it to start when U3 starts. Then you will have both menu's and can still use the U3 security (not that its really secure)
Shortcut Creator
SmithTech
"Because they stand on a wall and say, 'Nothing is going to hurt you tonight. Not on my watch.'" (A Few Good Men)
Coincidence is God's way of remaining anonymous.(Albert Einstein)