+ Post New Thread
Results 1 to 14 of 14
Wireless Networks Thread, Auto USB drive AV scanner in Technical; I'd like to set up a machine that can be used to scan USB drives before they are plugged into ...
  1. #1

    SimpleSi's Avatar
    Join Date
    Jun 2005
    Location
    Lancashire
    Posts
    5,780
    Thank Post
    1,469
    Thanked 591 Times in 443 Posts
    Rep Power
    168

    Auto USB drive AV scanner

    I'd like to set up a machine that can be used to scan USB drives before they are plugged into a networked machine.

    Now I could leave it disconneted from network and then once a week plug it back in and update its av engine but I wouldn't mind a more automatic solution.

    1. Anyway of setting up a machine so its just get av and windows updates but prevents other traffic (Simple hosts files entries maybe?)

    2. Auto scan USB Drive on insertion.

    Anyone got such an arrangement or know how to set one up?

    regards

    Simon

  2. #2
    AlexB's Avatar
    Join Date
    Jul 2006
    Location
    Warwickshire
    Posts
    365
    Thank Post
    36
    Thanked 36 Times in 32 Posts
    Rep Power
    23
    We use USBDLM for handling external drives. Please see this previous post for how the scan with macafee, would just need modifying for you av scanner

    Total ban on removable media

  3. Thanks to AlexB from:

    SimpleSi (19th March 2010)

  4. #3
    tommccann's Avatar
    Join Date
    Jun 2009
    Posts
    252
    Thank Post
    46
    Thanked 39 Times in 31 Posts
    Rep Power
    0
    Panda have a good free one, doesnt scan it but auto deletes the autorun and creates its own. seeing as most usb virus are the autorun file its very good

  5. #4

    Join Date
    May 2007
    Location
    Birmingham
    Posts
    169
    Thank Post
    9
    Thanked 45 Times in 36 Posts
    Rep Power
    27
    What about microsoft security Essentials as this has an option for removable media

  6. #5

    Join Date
    Dec 2007
    Posts
    863
    Thank Post
    90
    Thanked 164 Times in 139 Posts
    Rep Power
    49
    As mentioned use USBDLM to allocate a specific drive letter which then automatically starts (possible from command line) your AV software to start a full scan of the USB Pen Drive. (or simply insert USB Pen Drive, right click and select scan).

    Easiest way to isolate network traffic would be to update the virus definitions on the computer every morning, then simply unplug the cat5 cable for the rest of the day whilst its being used as a standalone av scanner.

    You could of course configure firewall, vlan etc etc whatever is easiest for you really.

  7. #6
    ICT_GUY's Avatar
    Join Date
    Feb 2007
    Location
    Weymouth
    Posts
    2,261
    Thank Post
    646
    Thanked 283 Times in 204 Posts
    Rep Power
    104
    I was thinking Vlan,

  8. Thanks to ICT_GUY from:

    SimpleSi (19th March 2010)

  9. #7

    SimpleSi's Avatar
    Join Date
    Jun 2005
    Location
    Lancashire
    Posts
    5,780
    Thank Post
    1,469
    Thanked 591 Times in 443 Posts
    Rep Power
    168
    The auto scan is a nice to have but not essential as the computer can have the instructions stuck on it

    Its just I'd like to setup and forget re MS and AV updating but not allow ANYTHING ELSE to get out onto the network.

    E.g if the machine gets infected from a infected USB drive I don't want it going any further than that machine.

    Could I run the machine in Linux and use its AV to scan for Windows virususii (Whatever ) or do linux AV scanners only scan for Linux vunerablities???.

    regards

    Simon

  10. #8

    Theblacksheep's Avatar
    Join Date
    Feb 2008
    Location
    In a house.
    Posts
    1,919
    Thank Post
    131
    Thanked 287 Times in 208 Posts
    Rep Power
    193
    Quote Originally Posted by JOrdan01070 View Post
    What about microsoft security Essentials as this has an option for removable media
    Home use only.

  11. #9

    SimpleSi's Avatar
    Join Date
    Jun 2005
    Location
    Lancashire
    Posts
    5,780
    Thank Post
    1,469
    Thanked 591 Times in 443 Posts
    Rep Power
    168
    ooh VLAN

    - prob is I don't have control over the CLEO Switch/router which prob has VLAN capabilitiy - and none of my cheap and cheerful switches do VLAN

    I could go down the USB 3G dongle route

    regards

    Simon

  12. #10

    Join Date
    Dec 2007
    Posts
    863
    Thank Post
    90
    Thanked 164 Times in 139 Posts
    Rep Power
    49
    With Sophos, for example, you can download an exe that downloads the latest av engine and definitions and creates a (bootable) linux based iso that you can simply burn to a CD-RW (so you can easily reuse and update the same CD-RW).

    Now, not tried the next bit yet (so just a theory!) you would then just need a pc with a cd-rom drive (dont even need a hdd), insert the CD-RW and usb pen drive, switch on and select scan / disinfect etc. It may need rebooting after each new usb pen drive inserted so it is detected.

    Better still burn the bootable linux image to an old 1gb usb pen drive, and boot from that if you old computer supports booting from usb!

  13. #11

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,273
    Thank Post
    614
    Thanked 1,567 Times in 1,407 Posts
    Rep Power
    412
    Unless your machines are configured to not allow access to usb devices unless they have some form of signature on them from your scannig pc which is only valid for a specific amount of time what's the point?

    They'll just not bother and plug them into machines as normal.

    Ben

  14. #12

    SimpleSi's Avatar
    Join Date
    Jun 2005
    Location
    Lancashire
    Posts
    5,780
    Thank Post
    1,469
    Thanked 591 Times in 443 Posts
    Rep Power
    168
    mm - but still means manual work for me every week to update it

    I want setup and forget (just like my central sophos servers )

    regards

    Simon

  15. #13

    Join Date
    Mar 2009
    Location
    West Yorkshire
    Posts
    66
    Thank Post
    12
    Thanked 6 Times in 6 Posts
    Rep Power
    15
    AVG can be configured to auto scan USB drive upon insertion.

  16. Thanks to chinesewhispers from:

    SimpleSi (20th March 2010)

  17. #14
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52

SHARE:
+ Post New Thread

Similar Threads

  1. USB sticks with auto launch software etc
    By SuperHans in forum Windows
    Replies: 1
    Last Post: 21st January 2010, 02:53 PM
  2. Synctoy - Auto sync to flash drive?
    By computer_expert in forum Windows
    Replies: 5
    Last Post: 5th October 2009, 09:33 AM
  3. Replies: 0
    Last Post: 30th March 2009, 12:44 PM
  4. Any recommendations for a USB Scanner?
    By flyinghaggis in forum Hardware
    Replies: 13
    Last Post: 5th September 2008, 11:04 AM
  5. Share USB Scanner
    By sqdge in forum Windows
    Replies: 25
    Last Post: 31st August 2008, 05:45 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •