Avast WEBforum

Other => General Topics => Topic started by: polonus on January 31, 2010, 02:15:54 AM

Title: irongeek's Thumbscrew - the poor man's USB write blocker...
Post by: polonus on January 31, 2010, 02:15:54 AM
Hi malware fighters,

Nice little app here, quick 'n simple and get's the job done, and useful for using a USB key to recover a virus infected machine without running as much of a risk of your drive getting infected.

USB write blocker download: http://irongeek.com/downloads/thumbscrew.zip

Enjoy,

polonus

Title: Re: irongeek's Thumbscrew - the poor man's USB write blocker...
Post by: CharleyO on January 31, 2010, 08:42:31 AM
***

Thanks for a nice find, Polonus.   :)


***
Title: Re: irongeek's Thumbscrew - the poor man's USB write blocker...
Post by: ardvark on January 31, 2010, 09:17:08 AM
Nice little app here, quick 'n simple and get's the job done, and useful for using a USB key to recover a virus infected machine without running as much of a risk of your drive getting infected.

USB write blocker download: http://irongeek.com/downloads/thumbscrew.zip

"Uhhhm... It ain't there dude." :P ;D

God bless :)
Title: Re: irongeek's Thumbscrew - the poor man's USB write blocker...
Post by: CharleyO on January 31, 2010, 09:36:58 AM
***

You can find it here :

http://www.irongeek.com/i.php?page=security/thumbscrew-software-usb-write-blocker


***
Title: Re: irongeek's Thumbscrew - the poor man's USB write blocker...
Post by: bob3160 on January 31, 2010, 03:12:17 PM
***

You can find it here :

http://www.irongeek.com/i.php?page=security/thumbscrew-software-usb-write-blocker


***
Not nice to get a security related program and get greeted by the following:
Title: Re: irongeek's Thumbscrew - the poor man's USB write blocker...
Post by: Alan Baxter on January 31, 2010, 03:57:32 PM
It's too bad your Trend Micro page didn't give more information.
www.browserdefender.com reports the site as Safe.

But is it really a good idea to use this program?
- Does irongeek have a reputation for developing good, safe software?
- I can't tell from thumbscrew's description that it would be useful as polonus suggested: "for using a USB key to recover a virus infected machine without running as much of a risk of your drive getting infected."
- Do you really want to rely on a "poor man's USB write blocker"?

Quote
Thumbscrew is my attempt at a poor man's USB write blocker. When used it allows you to quickly enable or disable writing to all USB mass storage devices on your Windows system. In other words, you can use it to make a USB flash drive, hard drive or IDE / SATA drive in an enclosure read only. However, I make no guarantees as to its forensic validity. Still, if your poor and you want to play around with making forensic images of thumb drives and other USB mass storage devices it may come in handy.
<snipped>
Thumbscrew has a few limitations:
1. I can't guarantee it's 100% forensically sound. Buy a proven USB hardware write blocker if you want to be sure.
<snipped>
Title: Re: irongeek's Thumbscrew - the poor man's USB write blocker...
Post by: polonus on January 31, 2010, 11:31:15 PM
Hi Alan Baxter,

It was kind of a work-around tool and it apparently worked for some as I gave comments from users.
As TrendMicro flags it, it is being flagged as PUP. To-day all programs that a sys admin did not like you to install yourself on "his" OS is considered a PUP and banned. McAfee Busines Solution has a long, long list and one has to have admin's rights to allow the program through the FW. But on the home front you have a different situation and can clear up who installed it and whether you like to allow its actions,

polonus

P.S. Alternatives mentioned in this thread: http://forum.avast.com/index.php?topic=49828.msg421706#msg421706

Title: Re: irongeek's Thumbscrew - the poor man's USB write blocker...
Post by: MWassef on February 01, 2010, 04:51:09 PM
me too Bob ..  :-\
Title: Re: irongeek's Thumbscrew - the poor man's USB write blocker...
Post by: MWassef on February 01, 2010, 04:55:13 PM
McAfee's SA site report (http://www.siteadvisor.com/sites/irongeek.com?premium=false&client_uid=2933537193&client_ver=3.0.1.163&client_type=IEPlugin&suite=false&aff_id=0&locale=en_us&os_ver=5.1.3.0&pip=true)
Title: Re: irongeek's Thumbscrew - the poor man's USB write blocker...
Post by: bob3160 on February 01, 2010, 05:00:21 PM
McAfee's SA site report (http://www.siteadvisor.com/sites/irongeek.com?premium=false&client_uid=2933537193&client_ver=3.0.1.163&client_type=IEPlugin&suite=false&aff_id=0&locale=en_us&os_ver=5.1.3.0&pip=true)
Accordig to that report, Thumbscrew is not a dangerous download.  :)
Title: Re: irongeek's Thumbscrew - the poor man's USB write blocker...
Post by: MWassef on February 02, 2010, 05:40:01 PM
anyway, I can't d/l this file  ::) I receive this message:

Uhhhm... It ain't there dude.

It could be you got this 404, 403 or 401 because of hotlink protections, try visiting the main site:

http://irongeek.com

If you still have issues email Irongeek.

  ??? ??? ??? ??? ???
Title: Re: irongeek's Thumbscrew - the poor man's USB write blocker...
Post by: spg SCOTT on February 02, 2010, 05:42:10 PM
***

You can find it here :

http://www.irongeek.com/i.php?page=security/thumbscrew-software-usb-write-blocker


***

You have to click on 'Download Thumbscrew' on that page, it seems as though the site protects against hotlinking...
Title: Re: irongeek's Thumbscrew - the poor man's USB write blocker...
Post by: MWassef on February 02, 2010, 09:22:21 PM
thnx spg SCOTT :)
Title: Re: irongeek's Thumbscrew - the poor man's USB write blocker...
Post by: spg SCOTT on February 02, 2010, 09:50:42 PM
You're welcome