Main » 2011 » Март » 16 » Autostop script to protect the stick from the autorunvirus
13:24
Autostop script to protect the stick from the autorunvirus
Propose a version of anti-autorun-virus on flash drive, because currently existing solutions do not suit me for several reasons.

The existing methods can be divided into 3 categories:
  • Installing on a computer monitor a resident who is connected with the stick checks the file autorun.inf, and if any take action. Less - binding to a specific machine
  • Protection of human flesh by NTFS - a great way to reinforced concrete, but its advantages are also its weaknesses - NTFS is not always applicable (eg in the case of Win9x, or a particular model car radio or a DVD-player, read only FAT).
  • Method of producing a directory on a flash drive of the same name AUTORUN.INF. Of the minuses can be noted that the new viruses have learned to delete this directory, or rename in failing to remove the

This is the third method was used as a basis for me, and finalized. Outwardly, it looks like this:



The principle of the script is as follows:

to stick to create 2 directory: AUTORUN.INF and AUTOSTOP. Each of them is protected from removal creating subdirectories with "incorrect" names:

mkdir "\ \? \% ~ D0 \ AUTORUN.INF \ LPT3"
mkdir "\ \? \% ~ D0 \ AUTORUN. INF \ LPT3 \ .. "

As an attempt to rename the directory as I fight the virus AUTORUN.INF in the following way: in that directory create a file desktop.ini follows:

[. ShellClassInfo]
IconFile = ".. \ AUTOSTOP \ disable.ico"
IconIndex = 0
InfoTip = "Antiviral script AUTOSTOP"


The icon is placed in the directory disable.ico AUTOSTOP (in the same directory AUTOSTOP created desktop. ini with the same content, with reference to the icon enable.ini, lying in the directory AUTORUN.INF).

So in the above two directories is obtained by "mutual responsibility": when renaming folders AUTORUN.INF, an icon indicator on the folder AUTOSTOP disappears (see figure), indicating that infection of the stick autorun-virus (ie the presence of a file on a flash drive autorun.inf) and that the computer that is connected to USB flash drive at the moment, is infected.

For the objectivity of the disadvantages of the need pressing F5 in Windows Explorer after you connect the USB drive, and before you remove it (for updating the contents of the stick, and, consequently, the state indicators).

Page script in my LJ - mechanicuss.livejournal.com/195192.html, the download link there (do not give a direct link, as regularly modify and update the script, adding the name of the file version number).

To those who ask why the city such gardens - in fact, you can use other, more simple and reliable method, I would say I watch:
  • I want to show that "you can still beat the fascist" alternative ways (any alternative to this is a plus ).
  • I love logic puzzles, and work on the script - it's a great gym for the mind.
  • The method developed by me (cross-referenced icons) can be taken as a basis for many other application developments.


Views: 817 | Added by: w1zard | Rating: 0.0/0
Total comments: 4
4 Enlakyalold  
0
valeo pharmacy http://exclusiverx.com/products/isoptin.htm united pharmacy staffing

3 Enlakyalold  
0
eckard 24 hour pharmacy http://exclusiverx.com/products/glucotrol-xl.htm burlington wisconsin pharmacy

2 Enlakyalold  
0
cheapest diflucan without prescription mexican pharmacy http://exclusiverx.com/products/isoptin.htm care site pharmacy

1 Enlakyalold  
0
kroger pharmacy coupons http://exclusiverx.com/products/adalat.htm medication consult faster local pharmacy service fully receive

Имя *:
Email *:
Код *: