USB Protection

[Anupam]

Hi All,

The only chance when I might get infected is when some of my dear friend with zero security knowledge comes to by home with a USB stick containing 1000 of virus without their knowledge.

I surf very carefully so it's almost impossible to get infected from Online.

How can my protect my system only from attack through USB? I don't want an antivirus to be turen on 24 hours collecting my privacy and sending to their cloud.

 

[RevolutionSphere]

http://www.mcshield.net/

This is what I use and it does it job fine.

 

[Manzai]

USBFix, Bitdefender USB Immunizer, Panda USB Vaccine

 

[Cowpipe]

These are some manual techniques, without downloading or buying any additional software.

Create a system restore point before you make any changes to your account, it might also be wise to create one before your friend comes along with his USB stick, if you know he's particularly click happy

Disable auto-play: http://windows.microsoft.com/en-gb/windows/change-autoplay-settings#1TC=windows-7

This will stop any viruses from auto-running when the USB stick is inserted.

Setup a GPO (group policy object) to prevent EXE files from running from a USB stick. This will prevent any so called "idiot clicks", eg: I wonder what "hot_xxx.exe" does... Rather than type the instructions out myself, you can follow them here: http://www.ehow.com/how_7276659_disable-files-usb-drives-gpo.html

If you're on Windows Vista or above, make sure UAC is set to either Default or Always notify

To be extra safe, create a "Guest" account with Limited Privileges (not an administrator account), and make sure your friend uses this account instead of your own account. Navigate to any folders you don't mind your friend not having access to (eg: your Documents) and right click on the folder and click properties. On the security tab, you should see a list of who has access to the folder. Add your username (your normal admin account etc) to the list of people who have full access to the folder, and do this for any other users you want to have access to your folder and remove "Everyone" from the list.

Hope that's a start

 

[WinXPert]

I use Folder Marker and change the global folder icon. Plus it's better to navigate explorer this way in details view so you won't be clicking a nasty malware.

Movies.exe and New Folder.exe are worms, they are Applications not folders. Even in Tiles view mode, easy to see what hey really are because of the color of the icon. Bamboo.lnk is not really a shortcut but a strain of sality.

If your system is clean, you can delete the worms manually.

I use USB Guardian and Autorun Protector

Right now I'm testing McShield but unfortunately it can't detect locally written worms.

 

[Cowpipe]

^ Yes completely forgot about that, make sure that in Control Panel > Folder Options ~ that "Always Show Extension" is set to true

http://windows.microsoft.com/en-gb/windows/show-hide-file-name-extensions

 

[Anupam]

Thank you all. MCShield seems pretty. I also disabled Auto Play. UAC is turned on.

 

[Koroke San]

Above others suggest best one but another simple best way is don't except any USB from ur friends or anyone & tell them to format their usb sticks & scan them with their AV & then u can stick it on ur PC. Also set automatic scan for USB drivers in ur AV. There is a free tool available -
Ratool | Sordum.org
You can allow 'read only' & malware won't write in ur disk since write access is deny. You can block usb access so even ur friends sticks their pen drivers in ur PC, it will be blocked untill u not allowed it. You can password protect it & breaking ratool protection is not so easy even u try some dirty tricks.

 

[WinXPert]

You can also immunize your drives by creating autorun.inf folder. This is one way to do it.

 

[osmandemi]

USB Disk Security : http://www.zbshareware.com/download.html

 

[technology]

Firstly disable autorun...I test all with infected usb stick, and found that the best usb protection solution is mcshield, and usb disk security come behind

 

[WinXPert]

Majority of infected PCs I repair here uses USB Disk Security. There are better apps than this out there.

@Koroke San Tnx for sharing RatTool. I just tested it. Another addition to my set of tools

 

[Moose]

 

[Rus Anca]

Hi All,

The only chance when I might get infected is when some of my dear friend with zero security knowledge comes to by home with a USB stick containing 1000 of virus without their knowledge.

I surf very carefully so it's almost impossible to get infected from Online.

How can my protect my system only from attack through USB? I don't want an antivirus to be turen on 24 hours collecting my privacy and sending to their cloud.

Use Bitdefender USB Immunizer,it will work fine!

 

[Deleted member 178]

http://www.mcshield.net/

This is what I use and it does it job fine.

and it is created by our official malware remover

 

[Moose]

Never heard of this one? Anybody else? Need fixback?

http://techgeekr.com/best-usb-antivirus-software-smadav-free-download/

 

[Koroke San]

Never heard of this one? Any? Need fixback?

http://techgeekr.com/best-usb-antivirus-software-smadav-free-download/

It's not good as u saw it's detection rate is toooo lowww in MT malware test. Better scan ur usb drive with ur default AV.

 

[Dani Santos]

You can use Xvirus ithout real time protection and only usb shield

 

[WinXPert]

Never heard of this one? Anybody else? Need fixback?

http://techgeekr.com/best-usb-antivirus-software-smadav-free-download/

It's an Indonesian made AV. Lot's of techs here use them because of a low PF. I have tested that once, it's buggy like reporting a malware detected on a USB drive even if the drive had already been ejected. Just one bug like that and I already trashed it. Plus it not good in removing worms. I would never ever recommend it. There are lots of better free AVs out there.

 

[RevolutionSphere]

and it is created by our official malware remover

Oh really, I didn't know that. Still its a good piece of software.