Author Topic: irongeek's Thumbscrew - the poor man's USB write blocker...  (Read 17956 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
irongeek's Thumbscrew - the poor man's USB write blocker...
« on: January 31, 2010, 02:15:54 AM »
Hi malware fighters,

Nice little app here, quick 'n simple and get's the job done, and useful for using a USB key to recover a virus infected machine without running as much of a risk of your drive getting infected.

USB write blocker download: http://irongeek.com/downloads/thumbscrew.zip

Enjoy,

polonus

Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

CharleyO

  • Guest
Re: irongeek's Thumbscrew - the poor man's USB write blocker...
« Reply #1 on: January 31, 2010, 08:42:31 AM »
***

Thanks for a nice find, Polonus.   :)


***

ardvark

  • Guest
Re: irongeek's Thumbscrew - the poor man's USB write blocker...
« Reply #2 on: January 31, 2010, 09:17:08 AM »
Nice little app here, quick 'n simple and get's the job done, and useful for using a USB key to recover a virus infected machine without running as much of a risk of your drive getting infected.

USB write blocker download: http://irongeek.com/downloads/thumbscrew.zip

"Uhhhm... It ain't there dude." :P ;D

God bless :)

CharleyO

  • Guest

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48551
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: irongeek's Thumbscrew - the poor man's USB write blocker...
« Reply #4 on: January 31, 2010, 03:12:17 PM »
***

You can find it here :

http://www.irongeek.com/i.php?page=security/thumbscrew-software-usb-write-blocker


***
Not nice to get a security related program and get greeted by the following:
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Alan Baxter

  • Guest
Re: irongeek's Thumbscrew - the poor man's USB write blocker...
« Reply #5 on: January 31, 2010, 03:57:32 PM »
It's too bad your Trend Micro page didn't give more information.
www.browserdefender.com reports the site as Safe.

But is it really a good idea to use this program?
- Does irongeek have a reputation for developing good, safe software?
- I can't tell from thumbscrew's description that it would be useful as polonus suggested: "for using a USB key to recover a virus infected machine without running as much of a risk of your drive getting infected."
- Do you really want to rely on a "poor man's USB write blocker"?

Quote
Thumbscrew is my attempt at a poor man's USB write blocker. When used it allows you to quickly enable or disable writing to all USB mass storage devices on your Windows system. In other words, you can use it to make a USB flash drive, hard drive or IDE / SATA drive in an enclosure read only. However, I make no guarantees as to its forensic validity. Still, if your poor and you want to play around with making forensic images of thumb drives and other USB mass storage devices it may come in handy.
<snipped>
Thumbscrew has a few limitations:
1. I can't guarantee it's 100% forensically sound. Buy a proven USB hardware write blocker if you want to be sure.
<snipped>
« Last Edit: January 31, 2010, 04:32:56 PM by Alan Baxter »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: irongeek's Thumbscrew - the poor man's USB write blocker...
« Reply #6 on: January 31, 2010, 11:31:15 PM »
Hi Alan Baxter,

It was kind of a work-around tool and it apparently worked for some as I gave comments from users.
As TrendMicro flags it, it is being flagged as PUP. To-day all programs that a sys admin did not like you to install yourself on "his" OS is considered a PUP and banned. McAfee Busines Solution has a long, long list and one has to have admin's rights to allow the program through the FW. But on the home front you have a different situation and can clear up who installed it and whether you like to allow its actions,

polonus

P.S. Alternatives mentioned in this thread: http://forum.avast.com/index.php?topic=49828.msg421706#msg421706

« Last Edit: February 01, 2010, 01:43:09 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline MWassef

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1315
Re: irongeek's Thumbscrew - the poor man's USB write blocker...
« Reply #7 on: February 01, 2010, 04:51:09 PM »
me too Bob ..  :-\
« Last Edit: February 01, 2010, 04:53:21 PM by minacross »
MW

Offline MWassef

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1315
MW

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48551
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: irongeek's Thumbscrew - the poor man's USB write blocker...
« Reply #9 on: February 01, 2010, 05:00:21 PM »
McAfee's SA site report
Accordig to that report, Thumbscrew is not a dangerous download.  :)
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline MWassef

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1315
Re: irongeek's Thumbscrew - the poor man's USB write blocker...
« Reply #10 on: February 02, 2010, 05:40:01 PM »
anyway, I can't d/l this file  ::) I receive this message:

Uhhhm... It ain't there dude.

It could be you got this 404, 403 or 401 because of hotlink protections, try visiting the main site:

http://irongeek.com

If you still have issues email Irongeek.

  ??? ??? ??? ??? ???
MW

spg SCOTT

  • Guest
Re: irongeek's Thumbscrew - the poor man's USB write blocker...
« Reply #11 on: February 02, 2010, 05:42:10 PM »
***

You can find it here :

http://www.irongeek.com/i.php?page=security/thumbscrew-software-usb-write-blocker


***

You have to click on 'Download Thumbscrew' on that page, it seems as though the site protects against hotlinking...

Offline MWassef

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1315
Re: irongeek's Thumbscrew - the poor man's USB write blocker...
« Reply #12 on: February 02, 2010, 09:22:21 PM »
thnx spg SCOTT :)
MW

spg SCOTT

  • Guest
Re: irongeek's Thumbscrew - the poor man's USB write blocker...
« Reply #13 on: February 02, 2010, 09:50:42 PM »
You're welcome