You are here

protect USB portable

16 posts / 0 new
Last post
rogerferrari
rogerferrari's picture
Offline
Last seen: 2 years 8 months ago
Joined: 2010-02-12 14:30
protect USB portable

Hi everybody!
I would like to know, how can I protect my pendrive from virus, worms, malwares, etc.
I use my Portable in College, Work, my girlsfriend home...
and I would like to ask for some way to protect it, for example, some sofwtare "write protect" that don't allow any program of damned virus to write in my portable USB, or some kind of "USB firewall protect" that would have the same function...
thx in advanced ^^

ottosykora
Offline
Last seen: 2 days 1 hour ago
Joined: 2007-10-11 17:48
hmm, difficult

if there is communication with the usb stick, then things go in and out.

Only thing I know is that there are some sticks, with hardware switch, which will tell the build in controller not to write anything to the actual flash chip at all.

But those sticks are somehow rare today, those I have for some special purposes are old and very small.

And ok, then there are all the encryption solutions which will do similar result for the user, but have all the usual problems as need of admin rights etc, or hardware encryption solutions, working for certain controllers only.

Otto Sykora
Basel, Switzerland

AtmanActive
AtmanActive's picture
Offline
Last seen: 14 years 4 weeks ago
Joined: 2010-01-25 06:27
USB WriteProtector

Yep, USB WriteProtector.
Works like a charm for me.

rogerferrari
rogerferrari's picture
Offline
Last seen: 2 years 8 months ago
Joined: 2010-02-12 14:30
I'm using this one now

hey, thx for the tip ^^
so, I started to use this app, but i have some doubts...
when it's on (disable writing) I can't remove the drive safely, appears a message saying that I cant stop the USB drive...
and with this USB WP you can use your USB drive in any place no worrying about any type of virus?

Rocking for the One who is the Rock

Jimbo
Offline
Last seen: 5 years 1 month ago
Joined: 2007-12-17 05:43
short answer : no

You are very definitely still at risk using this.

First of all, since you will be running this (or any other app) from the USB drive, then from the moment you plug it in until you have opened and set up the app, then your drive will be writeable. This includes a huge window of time during which the operating system will actively inform listening apps (or viruses) that a new drive has been plugged in. That means that they can get there then if they want to.

Second, the application itself will be prone to virus infection at launch time, depending on the type of virus.

Third, this particular application doesn't actually work. At least not on windows 7 (not listed as supported, but worrying that it to totally fails). I just downloaded it to test it, and happily copied files onto a flash drive, deleted files from it, edited files, all with total success.

Final point. If you're running this app, then it will be open and locking the drive, which is why you can't eject it until you close the app down.

Sadly, there is no possible software solution that will make you totally safe against viruses. Any (I'll say that again) ANY software technique that stops writes to a drive, can be overridden by an equivalent software technique that re-enables them. And any application that is on the drive is already too late to be sure of blocking virus infection by the time it is run.

The closest you could come to a software read-only drive would be something like TrueCrypt, which is capable of mounting a container in read-only mode, if given the correct password, but which needs admin access, and even then, the truecrypt executable would be unprotected and could be infected, and additional hidden files could be copied onto the drive with autorun functionality.

AtmanActive
AtmanActive's picture
Offline
Last seen: 14 years 4 weeks ago
Joined: 2010-01-25 06:27
Read on screen instructions

This application clearly states that whatever changes you do, it will be applied NEXT time you insert your device.

So, for me it works.
It works as advertised, and it works on Windows 7, both x86 and x64.
And no, I don't have any problems removing my USB device either after turning the write protection ON or OFF.
And the write protection is 100% present, no matter how hard I try, nothing ever gets written to the USB device while write protection is on.
I didn't read the source code but I believe it is writing a flag in the boot sector.
And no, virus can not get into your machine from boot sector UNLESS you boot from the infected USB drive.

ottosykora
Offline
Last seen: 2 days 1 hour ago
Joined: 2007-10-11 17:48
so what?

>but I believe it is writing a flag in the boot sector.

Otto Sykora
Basel, Switzerland

AtmanActive
AtmanActive's picture
Offline
Last seen: 14 years 4 weeks ago
Joined: 2010-01-25 06:27
no can do

>>but I believe it is writing a flag in the boot sector.

>what does someone prevent to overwrite the flag then? back to original state?

...it will be applied NEXT time you insert your device...

darkness2fall
Offline
Last seen: 11 years 7 months ago
Joined: 2009-11-14 02:32
about the virus thing...

What i do is that i operate from 2 flash drives. A 16 gig as my master, and a 4 gig as a stripped down version of the master. So if i happen to catch a virus,all i have to do is reformat the 4 gig,and simply reinstall my programs. Of course i also have a dvd rom of all the programs so if worse come,i can reformat everything and do a clean reinstall. Smile

ottosykora
Offline
Last seen: 2 days 1 hour ago
Joined: 2007-10-11 17:48
what I mean

@atmanactive

if a software running under windows can write something to the stick, then any, other software can do that too.

It does not write anything to boot record or similar, it does use windows function for that, just making changes to file structure frozen. But when the software can modify this, any other software including malware can do it. And the function it is calling up does exist only in more recent versions of windows.

Therefore any other oprating systems, like older windows versions, or linux or mac or what ever can use the stick as usual. There is nothing to prevent it.

So the software can be bypassed any time by anything, and particularly malware will not be impressed by the presence of such utility at all. It doe not matter wheather you plug it in or out or what ever. The function it calling up simply does not exist, so all writing is enabled as before.

The only way to make flash write protected would be to remove the write voltage on the hardware way.

Otto Sykora
Basel, Switzerland

AtmanActive
AtmanActive's picture
Offline
Last seen: 14 years 4 weeks ago
Joined: 2010-01-25 06:27
You're right, it's useless

Just tested it.
You are absolutely right. It is useless.

It does a local windows hack, so when you plug the USB into different system it is still writeable.

So, this USB WriteProtector is good only if you want to write protect your USB device from your self (!?!).
The situation remains the same, if you don't have hardware write protectable USB flash, you're out of luck.

Sorry everyone for getting your hopes up.

Darkbee
Darkbee's picture
Offline
Last seen: 4 years 9 months ago
Joined: 2008-04-14 09:41
Maybe next time

Props for admitting your mistake. I can understand why you'd want to believe it could be true! Wink

rogerferrari
rogerferrari's picture
Offline
Last seen: 2 years 8 months ago
Joined: 2010-02-12 14:30
so...

so the only way to protect my drive is:
not using it! lol
I hate viruses

Rocking for the One who is the Rock

Darkbee
Darkbee's picture
Offline
Last seen: 4 years 9 months ago
Joined: 2008-04-14 09:41
You are the weakest link!

The only way to secure a computer is to:
Not have it connected to the Internet.
Not have any humans come into contact with it.

Biggrin

pmshah
Offline
Last seen: 2 years 8 months ago
Joined: 2010-05-22 07:16
A really simple solution

I was similarly worried as none of the decent quality/reliable branded pendrives have any hardware method for write protecting them. The ones that supposedly do are from dicey vendors. So finally I did something different.

I got my self a standard size 16 GB Sandisk SD card which has a genuinely functional write protect sliding tab like on the old time floppy disks. Mind you I have also seen some well known branded SD cards that have these tabs but do ABSOLUTELY NOTHING !!! I use this with a mini sized multi card reader. I am able to boot from this to install say Win 7, Boot various flavours of mini versions of portable Linux distros like DSL, Gparted, Puppy (full ram mode without saving session) and of course Portableapps (without upgrade/update facility). I can't put this on my keychain but security is much higher priority for me than a little inconvenience.

JKEngineer
Offline
Last seen: 2 years 7 months ago
Joined: 2008-03-02 14:21
The SD card

approach is something I have also thought of, but not implemented. An alternative to the mini card reader approach suggested by pmshah is to get a device that looks like a thumb drive but has a slot for either an SD card or a micro SD card (or both). I have seen them on line with a slot in the rear that "swallows" the micro card or even a slot/port on the top that the card is inserted into. I just bought one with a standard SD slot and a micro SD slot on the side, so the cards stick out when in use, but it is otherwise physically like a thumb drive. It's an IOGEAR that I got from Amazon. ( IOGEAR SD/MicroSD/MMC Card Reader/Writer GFR204SD (Green/Gray) http://www.amazon.com/dp/B0046TJG1U/ref=pe_175190_21431760_M2C_ST1_dp_1 ) Cost $6.99, and free shipping at the moment.

I would appreciate more information from pmshah about the comment that some of the write protect tabs do nothing.

JK

Log in or register to post comments