Preventing Virus Infections via Pen Drives

Submitted by Boaz on Wed, 04/29/2009 - 16:57

Note: To download the "Disable USB" utility, you will first need to login.

Pen-drives - these ubiquitous and innocent-looking devices carried in pocketbooks and gho pockets around the capital, are a major vector of computer virus infections in Bhutan. Here's how these pen-drive viruses are spread:

You insert your new (and clean) pen-drive into your friend's infected computer. The computer malicously copies the virus to your pen drive (also known as a USB drive or USB stick), thus contaminating it. Then you take your pen drive home and insert it into your own computer. The virus - now on the pen-drive - copies itself to your computer. You're doomed!

Even if you make an effort to keep your computer - and pen drives - clean, friends or family might insert their contaminated pen drives into your computer, thus infecting your computer. To avoid these unintentional infections, here's a Windows XP/Vista utility that disables the pen drives on your computer. First, download the utility to your computer by clicking here (the utility is also attached at the end of this post). Once you run it, select "Disable USB Drives" and then reboot. Pen drives will no longer be accessible. If you are 100% sure that a pen drive is clean, you can re-enable access by running the utility again, selecting "Enable USB Drives", and then re-booting. Don't forget to disable the pen-drives once you are done.

If you have smart friends, they might find the utility on your hard drive and re-enable access to the pen drives. To prevent that, first add a password to your account: In Windows XP, go to Start->Control Panel->User Accounts. Then pick your account (usually Administrator), and choose Create a Password. The next step is to enable the Guest account, which your friends can use: In Windows XP, go to Start->Control Panel->User Accounts. Then pick the Guest account, and enable it. You now have two accounts on your computer: one for yourself, and another for guests. Don't forget to always log out from your Administrator account after you are finished with the computer.

"Disable USB Drives"

Submitted by Tamang on Mon, 05/18/2009 - 14:49.

Hi,
Please can you tell me how I can download the disable USB drives.
Thanks
With best regards
Tamang

Downloading the disable USB application

Submitted by Galit on Sun, 05/31/2009 - 13:52.

Hi Tamang,
You should be able to see the file DisableUSB_Free.exe right below the post on the webpage http://thimphutech.com/content/preventing-virus-infections-pen-drives. Or, in the post itself there is a place saying "download the utility to your computer by clicking here". Click on the word "here" to download the file.

Good luck,
Galit

Disable External Drive!!

Submitted by cthar on Wed, 05/20/2009 - 12:18.

Does this also apply to External Hard Drives.
and will this utility work for External hard drives...

I had no opportunity to check

Submitted by Boaz on Tue, 06/02/2009 - 09:08.

I had no opportunity to check if the utility also disables external disk drives.
If you are reading this and can share your experience regarding this matter, please post your results. Thanks!

One another way to disable the USB Sockets and even CD/DVD Drive

Submitted by dordrag on Sun, 10/18/2009 - 19:40.

I like the information provided above but I would also like to share how to disable the USB Drives manually in windows Vista (In Windows XP it is almost similar but confirm it before). Let start:

Right Click on "My Computer"
Click "Properties"
Select "Device Manager" from top left corner
----------------There you will see lists of computer components where you will see "Universal Serial Bus Controllers", click on "+" (Plus) sign to change to "-" (Minus) sign.
You will see lists of USB Hosts. Start disabling the USB simply by right clicking on the list and selecting "Disable". Then it is disabled.
Even in this way, you can disable floppy drive and CD Drive. This would further enhance your system security and when you need to use the ports or CD/Floppy, just follow the same process but select enable.

Hope this would be of some help.

All the best.