Text 57868, 63 rader
Skriven 2009-11-01 10:51:00 av Ross Cassell (1:123/456)
  Kommentar till text 57867 av August Abolins (1:123/789.0)
Ärende: Bodging A Dullet
========================
Hello August!

01 Nov 09 10:35, you wrote to me:

 RC>> But I am thinking on creating a dummy text file, calling it
 RC>> autorun.inf and setting it to read only, just to prevent the
 RC>> insertion of one on the drive anyway, until I find a solution
 RC>> to make writing to the drive a impossibility until I want it
 RC>> written to.

 AA> VERY clever to create your own autorun.inf and set it read only.

 AA> I posted a story a few months ago here about a flash drive infection
 AA> that I experienced.  I believe the nasty checked for the existence of
 AA> an autorun.inf, remove the read-only attribute and drop its own copy
 AA> onto the drive.

That might happen, but I wonder if I set the hidden attribute on it as well.

The software options I was able to find involve a registry hack on the host
machine, either by doing it manually or a couple freeware utilities that do it
for you. But this has to be on the machine the drive is being used on.

Another trick I saw someone suggest is a utility to create a dummy file that
takes up the remaining free space on the drive and set its attributes to rhso.

I dont want to take that tact because when I have to update the drives
contents..

So my solution is this, I have ordered myself 2 4gb flash drives that have the
PHYSICAL write protect switch!! <AHA>

 AA> If you're only storing files on the flash drive, why not just encrypt
 AA> it?

Because that requires the encryption software to be on the host machine, at
least from what I gathered from limited reading. I use this drive to insert
into customer computers to install and run Malwarebytes, service packs and
other things.. What I tried to do last night was update the drive with the XP
mode files.

Some of them come in so unstable that to think about putting encryption
software on their boxes so that I can read my own drive or to put in the
registry hack, is out of the question.

Therefore I will have physically write protected drives and that solves my
problem and eliminates the risk of me cross pollenating multiple customers in
the same day.. <G>

If I see a dialog open up on their box that it cant write to the drive, I will
have a good idea that they are infected.

Only time I use the work drive here is to update it, I have other drives I use
strictly around the house.

==
Ross
Fidonet Feeds Or Fidonet In Your Newsreader: http://www.easternstar.info
E-mail: ross(at)cassell(dot)us | Other Places: http://links.cassell.us
Fidonet Netmail Routing Chart Z1 Only: http://netmail.fidonet4u.info
... Democrats Are Like A Farm Pond, The Scum Always Rises To The Top.
--- GoldED+/LNX 1.1.5-b20060121
 * Origin: The Eastern Star - Spartanburg, SC USA (1:123/456)