Put U3 to REAL use...

30 posts / 0 new

Topic locked

Last post

January 13, 2007 - 10:27pm

iamacooldude

Offline

Last seen: 15 years 6 months ago

Joined: 2006-11-29 19:18

Put U3 to REAL use...

I'm sure a few of you with U3 drives have heard of Gnu3izer and such for making your U3 drive Autorun anything. I have made a launcher for the CD portion of the drive that will run any commands in a file called usbgo.bat on your usb drive. The source is in Delphi. Is anyone interested in someting like this, as the .vbs included in Gnu3izer and Universal_Customizer can be blocked by some computers in "high security"? The CD images comes with Universal_Customizer, which I have had more luck with than Gnu3izer. I used it successfuly on a Memmorex 1gb usb travel drive.

http://www.sendspace.com/file/tpaf3s(old link)

http://eyecreate.googlepages.com/PortableApps-Universal_Customizer-de.rar
(corrected from below)

If anything is unclear, please ask me.

January 13, 2007 - 10:34pm

Tim Clark

Offline

Last seen: 12 years 5 months ago

Joined: 2006-06-18 13:55

What's the problem?

What is it about the .vbs included in Gnu3izer and Universal_Customizer that is causing it to be blocked by secure computers?

Tim

Things have got to get better, they can't get worse, or can they?

January 14, 2007 - 12:12am

(Reply to #2) #3

NMC

Offline

Last seen: 12 years 8 months ago

Joined: 2006-01-13 19:33

How to

Use this U3 replacement? Could you give a brief outline of using this?
Thanks in advance. Regards NMC
U3 is blocked on my workplace computer anyway.

January 14, 2007 - 3:15am

(Reply to #3) #4

Tim Clark

Offline

Last seen: 12 years 5 months ago

Joined: 2006-06-18 13:55

But are they safe?

I understand your difficultly, But my concern is the safety of the programs involved. If this involves the U3 Universal_Customizer I am thinking of, it looks like it was originally used to install malware/spyware on to U3 drives.

The question is, was it the method used to install spyware/malware, or did it contain the malware itself?

See:
http://www.hak5.org/wiki/USB_Switchblade
and
http://www.hak5.org/wiki/USB_Hacksaw
and
http://www.hak5.org/wiki/Universal_U3_LaunchPad_Hacker
and
http://www.hak5.org/forums/viewtopic.php?t=3437
The pre-packaged 'U3CUSTOM.ISO' file is the loader for the U3 SwitchBlade/Hacksaw.

My hope is that before this forum lends support to this that the programs and installers (if they are open source) are investigated.

Also, the link provided, which "(Link only availible for a few days)" does not inspire me with confidence either. I would think the poster should link to a site with which s/he could be more easily identified.

Tim

Things have got to get better, they can't get worse, or can they?

January 14, 2007 - 3:17am

(Reply to #4) #5

Tim Clark

Offline

Last seen: 12 years 5 months ago

Joined: 2006-06-18 13:55

cont...

(it appears my first post was truncated?)

My hope is that before this forum lends support to this that the programs and installers (if they are open source) are investigated.

Tim

Things have got to get better, they can't get worse, or can they?

January 14, 2007 - 3:25am

(Reply to #5) #6

Ryan McCue

Offline

Last seen: 13 years 11 months ago

Joined: 2006-01-06 21:27

Nope

But you put <s and >s which is HTML.
To put those in posts, you have to use < and >
I've fixed for you.
----
Ryan McCue
Person 1: Oh my god. You will never believe what just happened.
Person 2: What?
Person 1: I can't remember, I've forgotten.

"If you're not part of the solution, you're part of the precipitate."

January 23, 2007 - 7:44am

(Reply to #6) #7

RMB Fixed

Offline

Last seen: 13 years 8 months ago

Joined: 2006-10-24 10:30

it's the fact that it's a

it's the fact that it's a .vbs .
secured computers don't allow people to execute .vbs
not "installed" (authorized) by an admin and nor should they .
so it has nothing to do with what is in the .vbs
A real "secured" PC doesn't even allow execution of programs from
a removable media or mounting of new drives, so u3 wont work on one
unless it has been allowed by an admin.

January 15, 2007 - 9:57am

iamacooldude

Offline

Last seen: 15 years 6 months ago

Joined: 2006-11-29 19:18

sorry for the confusion

sorry about the confusion. I know there are mixed sayings going around about this.
The U3 Customizer has no malware, the only malware is what you decide to put on yourself in the ISO. Those articles were writen with that intent, but it doesn't have to be that way. I do not want or like malware, and will try to make sure nothing I release has it. The problem with the .vbs was that some antivirus programs(namely Symantac) would stop the script, making it harder to use and less streamlined. Some people who may know less about computers would misataken it for malware too, becuase thier antivirus program tagged it, and that would be the end of thier "working" usb launcher. (btw, if U3 is blocked at your work, it could be either the autorun or the launcher, but I would suspect the autorun. In that case, none of these "autorun" launchers will work.) The U3CUSROM.iso file is generated with whatever content you want. The article mentions one with malware in it. Sorry about the temporary link, I can try to find a longer lasting one, but I put that in because the last time I posted a link hosted on sendspace, people couldn't use it after awhile.(new link will be on first post)

The ISO I have contains:
autorun.inf(required by Windows to start anything up)
Credits.txt(The name tells you what it is... )
Universal_Cutomizer.zip(this is the base Universal Customizer package as I received it. For those who want it without modifications)
Autorunner.exe(This is my actual launcher I made. Source included in main 7z)

If you want anything more, just ask. I can be contacted by email, if you prefer, at eyecreate_at_gmail.com.I also have a webpage(not updated as much as it should)at eyecreate.googlepages.com

Nobody should start to undertake a large project. You start with a small _trivial_ project, and you should never expect it to get large. If you do, you'll just overdesign and generally think it is more important than it likely is at that stage. Or worse,

January 15, 2007 - 4:43pm

(Reply to #8) #9

Ryan McCue

Offline

Last seen: 13 years 11 months ago

Joined: 2006-01-06 21:27

If you ever

want a mirror or some other hosting, email me at cubegames[at]gmail.com
----
Ryan McCue
Person 1: Oh my god. You will never believe what just happened.
Person 2: What?
Person 1: I can't remember, I've forgotten.

"If you're not part of the solution, you're part of the precipitate."

January 15, 2007 - 5:55pm

#10

iamacooldude

Offline

Last seen: 15 years 6 months ago

Joined: 2006-11-29 19:18

...

I don't think I have a problem right now, but I will remember that for later. Thanks for your offer!

January 23, 2007 - 12:23pm

(Reply to #10) #11

Tim Clark

Offline

Last seen: 12 years 5 months ago

Joined: 2006-06-18 13:55

YOUR DOWNLOAD CONTAINS SPYWARE!!

The U3Custom.iso included in your download in the "Universal_Cutomizer.zip" contains SPYWARE. You MUST REMOVE IT !!!

QUOTE
"The ISO I have contains:
autorun.inf(required by Windows to start anything up)
Credits.txt(The name tells you what it is...)

Universal_Cutomizer.zip(this is the base Universal Customizer package as I received it. For those who want it without modifications).
END QUOTE

THE ABOVE .zip CONTAINS SPYWARE!!!, WHY WOULD ANY LEGIT PERSON WANT IT
WHY WOULD ANY LEGIT PERSON DISTRIBUTE IT

Tim
Geek w/o portfolio

Things have got to get better, they can't get worse, or can they?

January 23, 2007 - 3:03pm

(Reply to #11) #12

Leftblank

Offline

Last seen: 16 years 7 months ago

Joined: 2007-01-23 14:21

It's one of their projects,

It's one of their projects, not cool indeed, but so be it. They've also got a whitehat version on their site applying all kinds of optimizations/security fixes to Windows pc's and undoing their own effects.

Anyway, I'm trying it out now - when you use his file simply delete that 'U3Custom.iso' and make your own by clicking the 'ISOCreate.cmd' file, you're safe after doing so.

Edit; I've tried it and it works like a champ, you'll need to add a new file to your USB drive though (right beside your 'StartPortableApps.exe'), containing:

@echo off
start StartPortableApps.exe

January 23, 2007 - 4:11pm

(Reply to #12) #13

Tim Clark

Offline

Last seen: 12 years 5 months ago

Joined: 2006-06-18 13:55

Not Cool indeed!

Not So Be It!

My point is that he should not be posting a link to a file which contains SPYWARE in the first place. He should have removed the spyware .iso from the zip or he should not be posting it.

"when you use his file simply ..."
I will not use it, nor encourge anyone else to use it.
Links to files which contain SPYWARE should not be posted in this forum, or any other under any circumstances. It can only cause me to look upon the poster and the project with suspicion.

Tim
Geek w/o portfolio

Things have got to get better, they can't get worse, or can they?

January 24, 2007 - 6:17pm

(Reply to #13) #14

iamacooldude

Offline

Last seen: 15 years 6 months ago

Joined: 2006-11-29 19:18

The only thing in the .iso

The only thing in the .iso in the zip is this vbs script and a .doc file("Windows 2000 public key infrastructure"- Don't ask me, I didn't put it in there)The .vbs is this:

Set objFSO = CreateObject("Scripting.FileSystemObject")
Set colDrives = objFSO.Drives
For Each objDrive in colDrives
If objDrive.DriveLetter"A" Then
If objFSO.FileExists(objDrive.DriveLetter & ":\go.cmd") Then
strPath = objDrive.DriveLetter & ":"
strcmd = """" & strPath & "\" & "go.cmd" & """"
CreateObject("Wscript.Shell").CurrentDirectory = strPath
CreateObject("Wscript.Shell").Run strcmd,0,False
End If
End If
Next

Other than that, I could find no REAL malware/spyware in it. The Universal Customizer I got was NOT related to the Hacksaw project and is why it doesn't have it in the .iso. If you think I missed something, than say so, but unless you can actually find the malware/spyware, please don't accuse it of having it.
I'll accept constructive criticism.

Thanks for the feedback LeftBlank, I'm glad someone got some good use from it.

January 24, 2007 - 6:56pm

(Reply to #14) #15

Tim Clark

Offline

Last seen: 12 years 5 months ago

Joined: 2006-06-18 13:55

From the Source...

From the source:
http://www.hak5.org/wiki/Universal_U3_LaunchPad_Hacker

Quote===
To Use

1. Download and Extract Universal Customizer 1.0.0.8 to the desktop or wherever you wish to install it.
2. Insert a U3 Drive into your PC.
3. Follow the on-screen instructions.
4. Done.

This computer application is not able to make a classic(normal) flash drive U3 compliant.
[edit]
Creating your own ISO

The pre-packaged 'U3CUSTOM.ISO' file is the loader for the U3 SwitchBlade/Hacksaw.

You might have to run this software 2 or more times before it works properly (you might get an error message) and manually put your files back on the flash drive and re-install your U3 software titles.
===End Quote

Also I posted the go.vbe from Your download to a scanning forum:
Panda detected:
Panda 9.0.0.4 01.25.2007 HackTool/HackSaw

Why do you seem to want defend yourself rather than just remove the offending U3Custom.iso that came in the Zip?
Remove it please.

Respectfully,
Tim

Things have got to get better, they can't get worse, or can they?

January 24, 2007 - 8:29pm

#16

SmithTech

Offline

Last seen: 1 year 5 months ago

Joined: 2006-11-24 18:06

Make Your Own Updater

Instead of arguing, why not just make your own updater and .iso
The Universal Updater is nothing more than a hex edited version of Memorex's Updater.
You can do it yourself, instructions posted here.
U3Updater Instructions
Then create your own launcher or vbs script and add it to an ISO.
Or use my launcher, ISO is HERE

A word of caution the Memorex Updater, as well as the Universal Updater will format your U3 drive so back it up!!!

SmithTech

"Because they stand on a wall and say, 'Nothing is going to hurt you tonight. Not on my watch.'" (A Few Good Men)
Coincidence is God's way of remaining anonymous.(Albert Einstein)

January 24, 2007 - 8:54pm

(Reply to #16) #17

Tim Clark

Offline

Last seen: 12 years 5 months ago

Joined: 2006-06-18 13:55

Thank You!

Thank you SmithTech,

This was probably going to be my next point, and I was going to recommend your post in this group as a better way of doing things.
I have visited your site and followed your instruction.
They seem very easy to follow. I have not gone so far as to make or burn an iso because I am quite happy with my U3 Drive as it is.

It is much safer to do the work yourself and you provide links to all of the original sources, I appreciate that.

My point is that the poster should not be posting files that have a questionable background and could be dangerous, not that he himself is intending harm.

Tim
Geek w/o portfolio

Things have got to get better, they can't get worse, or can they?

January 27, 2007 - 6:26pm

(Reply to #17) #18

SmithTech

Offline

Last seen: 1 year 5 months ago

Joined: 2006-11-24 18:06

Apparently my host doesn't

Apparently my host doesn't like iso's so I had to zip it.
If you want the ISO, you can download it in a zip file HERE

SmithTech

"Because they stand on a wall and say, 'Nothing is going to hurt you tonight. Not on my watch.'" (A Few Good Men)
Coincidence is God's way of remaining anonymous.(Albert Einstein)

January 24, 2007 - 10:35pm

#19

iamacooldude

Offline

Last seen: 15 years 6 months ago

Joined: 2006-11-29 19:18

Alright, I took out the

Alright, I took out the "original" iso, even though I can't see what's malicious with that .vbe script. The contents of the iso are the same without the zip file and the rar file has just the source and the hexedited memorex updater tool. I guess it safer to error on the side of mercy(aka take the debated iso out) than fuss with it's contents of which few will even look at. Link above updated. I hope everyone is happy.

January 27, 2007 - 5:31am

#20

Leftblank

Offline

Last seen: 16 years 7 months ago

Joined: 2007-01-23 14:21

Thanks, hopefully the fuzz

Thanks, hopefully the fuzz will lie down now

January 27, 2007 - 1:13pm

(Reply to #20) #21

stester

Offline

Last seen: 16 years 3 months ago

Joined: 2007-01-27 11:31

Yeah, Right

Those people who are concerned with our saftey can be a real pain in the ass. How are we ever gonna spread crap if people actually check up on us. Just shut up, trust us, and download what we tell you to.

The above was sarcasm in case you missed it.

I thought that one of the main points of open source was that people could investigate programs and find problems.

BTW: this tread has lain dormant for 3 days, so the "fuzz/fuss" had laid/died down, till YOU woke it up.

stester - first time poster, thanks to you.

January 30, 2007 - 3:31pm

(Reply to #21) #22

Leftblank

Offline

Last seen: 16 years 7 months ago

Joined: 2007-01-23 14:21

I've got to love the welcome

I've got to love the welcome atmosphere here on these forums, are there also people who will just be nice here?

I've never said safety doesn't matter, in fact not even close. I actually posted up that you should simply use your own ISO instead of the prepacked one - that way you've got basically no risk, especially not if you use his Delphi program, which is open source (and so is his hacksaw or whatever it's named project as well if I'm correct), unlike the Smithfield app...

January 29, 2007 - 6:30pm

#23

iamacooldude

Offline

Last seen: 15 years 6 months ago

Joined: 2006-11-29 19:18

cool

your iso is pretty good too. Good work SmithTech!

January 29, 2007 - 11:15pm

#24

nanobreaker

Offline

Last seen: 11 years 9 months ago

Joined: 2005-12-09 23:02

Thanks SmithTech!!!

I used your .iso with Universal Customizer on my Kingston U3 Flash Drive and it worked like a charm!!

-
There are only 10 types of people in the world: Those who understand binary, and those who don't. - Anonymous

January 31, 2007 - 8:26am

#25

melenor

Offline

Last seen: 14 years 6 months ago

Joined: 2007-01-31 07:23

i am comewhat confused this

i am comewhat confused this will allow me to run the portable apps suite instead of the U3 right and run other things but if i wanted too could i reinstall the U3 Lanch pad

January 31, 2007 - 9:51pm

(Reply to #25) #26

nanobreaker

Offline

Last seen: 11 years 9 months ago

Joined: 2005-12-09 23:02

yes, you can

yes, you can reinstall the original launchpad just make sure you find your company's .iso on some website...

-
There are only 10 types of people in the world: Those who understand binary, and those who don't. - Anonymous

February 1, 2007 - 7:43am

(Reply to #26) #27

SmithTech

Offline

Last seen: 1 year 5 months ago

Joined: 2006-11-24 18:06

You can also use UltraISO or

You can also use UltraISO or another program to make your own ISO of the cd-rom partition of the U3 drive BEFORE you modify it and keep the ISO as a backup.

SmithTech

"Because they stand on a wall and say, 'Nothing is going to hurt you tonight. Not on my watch.'" (A Few Good Men)
Coincidence is God's way of remaining anonymous.(Albert Einstein)

February 5, 2007 - 5:12pm

#28

szucsati

Offline

Last seen: 16 years 7 months ago

Joined: 2006-09-07 19:57

Security

Can I use my U3 drive's security feature with PortableApps menu?

February 7, 2007 - 1:17pm

(Reply to #28) #29

Leftblank

Offline

Last seen: 16 years 7 months ago

Joined: 2007-01-23 14:21

Nope, that's (sadly) not

Nope, that's (sadly) not (yet?) possible.

February 8, 2007 - 1:23pm

(Reply to #29) #30

SmithTech

Offline

Last seen: 1 year 5 months ago

Joined: 2006-11-24 18:06

You can if you DO NOT

You can if you DO NOT replace the U3 Launchpad.
You can use my Shortcut Creator to add the Portable Apps Menu to the U3 launchpad, once you have the shortcut on the launchpad you can set it to start when U3 starts. Then you will have both menu's and can still use the U3 security (not that its really secure)
Shortcut Creator

SmithTech

"Because they stand on a wall and say, 'Nothing is going to hurt you tonight. Not on my watch.'" (A Few Good Men)
Coincidence is God's way of remaining anonymous.(Albert Einstein)

Topic locked

Please Help Support Us

Please consider making a donation so we can keep bringing you great software.

You are here

Put U3 to REAL use...

Please Help Support Us

Translate Page

Latest Releases & News

Join Our Community

Partner with PortableApps.com

About PortableApps.com

You are here

Put U3 to REAL use...

Please Help Support Us

Translate Page

User login

Latest Releases & News

Join Our Community

Partner with PortableApps.com

About PortableApps.com