Gladiator Security Forum

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> Question regarding ibly infected "USB" drives
kwyjibo
post Apr 3 2008, 03:00 AM
Post #1


New Member
Group Icon

Group: Member
Posts: 7
Joined: 2-April 08
Member No.: 24105



After a computer scare, I have been hesitant to use my USB on my computer, since the computer obtained a virus around the time I used the USB on the computer. Whether it was the USB or not, I don't know. Now, here's the problem: I have University assignments INSIDE the USB. My question is: Do USBs infect computers by putting them in the hard-drive slot, or does the outbreak occur when opening a file within the USB? (Powerpoint presentations and Word documents)

I need to know this, so I can confirm whether I'll have to schedule time at the library to work solely on the computers there. If it's the latter case (preferably), then I can insert it and then scan it and fix the USB (somehow) before really opening up and continuing to work on my projects. crying.gif

I'm not asking for a solution, since I don't have a problem (per se). I just need to know when EXACTLY do infected USB drivers affect computers (upon insertion or upon opening a file inside the USB)?

Greatly appreciate any help!
Go to the top of the page
 
Quote Post
Hunter
post Apr 3 2008, 02:29 PM
Post #2


The Flying Dutchman
Group Icon

Group: General Admin
Posts: 12070
Joined: 7-May 03
Member No.: 3255



Best way to answer all your questions would be in this thread since at that site we have investigated all the problems and have come up with answers on how you can protect yourself and what to expect.

Disabling 'Autorun' on USB and beyond. Need help.
http://www.dslreports.com/forum/r20267468-...eyond-Need-help


One quick trick prevents AutoRun attacks
http://windowssecrets.com/comp/071108

Blocking autorun
http://www.dslreports.com/forum/r19412105-Blocking-autorun

Then i want you to read this post of mine since it will lead your right back to Our Forum where we are currently helping people who have been infected with a virus..most likely just like you ran into.
http://www.dslreports.com/forum/r20268979-


Basicially if any PC is set to autopaly or auto run..then any USB drive type device will begin to play or load. That is not good..it could already be infect and/or the PC itself if exploited already.could then infect the flash drive.

and when that happens it is hard for even your antivirus or other cleaning programs to just clean that usb flash drive or any other stick.

Even those PC's in the library could already be infect with..


W32/Autorun.worm.bx
Overview -
This detection is for a worm that attempts to copy itself to the root of any accessible disk volumes. Additionally it attempts to place an Autorun.inf file on the root of the volume so that it is executed the next time the volume is mounted.
http://vil.nai.com/vil/content/v_144151.htm


where this is added to their system

C:\Autorun.inf
C:\WINDOWS\system32\amvo.exe
C:\WINDOWS\system32\amvo1.dll
D:\Autorun.inf
F:\Autorun.inf

with a lot of other crap. OMG.gif


This is a PC that is already infected

http://gladiator-antivirus.com/forum/index...mp;#entry201354

and of course this is your thread


bloodhound.packed.jmp
http://gladiator-antivirus.com/forum/index...showtopic=70868
Go to the top of the page
 
Quote Post
Hunter
post Apr 3 2008, 02:42 PM
Post #3


The Flying Dutchman
Group Icon

Group: General Admin
Posts: 12070
Joined: 7-May 03
Member No.: 3255



Now the other problem is where did you get the flash drive in the first place..was it totally clean and just a strage device..or did you buy one that is loaded with a program that immediatley tries to install stuff like U3 technology.


Meet the next generation of USB flash drives: the U3 smart drive. It's
what's inside that makes them smart.
http://www.u3.com/

This technology will try to install software as soon as you plug in the drive

http://www.u3.com/smart/default.aspx


Imagine carrying your software on the same flash drive that carries your files. That’s what you can do with a U3 smart drive. You can plug it into any PC and work, play a game, message friends, send email, edit photos and more. A U3 smart drive makes any PC your own PC. And when you unplug it, it leaves no personal data behind.

Which then complicates the whole equation of trying to keep bad boys from infecting those flashdrives.

In my opinion it would be better to uninstall that stuff as soon as it is purchased.


http://www.mydigitallife.info/2006/09/11/d...ives-launchpad/

http://academhack.outsidethetext.com/home/...esnot-so-smart/
Go to the top of the page
 
Quote Post
Chachazz
post Apr 3 2008, 07:57 PM
Post #4


GSF's HoneyBee
Group Icon

Group: General Admin
Posts: 23778
Joined: 23-April 04
Member No.: 7183



As usual, Hunter has great advice for you.

Also, check through all the software http://gladiator-antivirus.com/forum/index.php?showforum=227

as there are anti-virus and security programs listed for USB also.

ciao.gif


--------------------
Go to the top of the page
 
Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



Lo-Fi Version Time is now: 21st November 2009 - 12:05 AM


Design by: Skins IPB & Web Browsers