Latest Entries »

Read only access to USB device

In some cases you want users to access the USB device but you dont want them to copy important company documents.

In that case

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StorageDevicePolicies]
“WriteProtect”=dword:00000001

Just copy the above command and paste in a notepad and save it as DisableUSBWrite.reg

Then double click on the created reg file.

Job is done.

Many of you would have thought is there any simple way of disabling or enabling USB device in your Computer.

For those who are searching for this you have got it.

You can do it in 2 ways.

1. Using the registry – If u wanna do it in 1 or 2 computers or in a workstation environment.

GOTO Start -> Run -> REGEDIT

HKLM\System\CurrentControlSet\Services\usbstor

On the right side select start and change the value from 3 to 4 to disable USB access.

2. Using the group policy – If u have a Domain and u wanna block USB in all the computers in ur network.

Check with Microsoft kb for doing the above. Here is the link

http://support.microsoft.com/kb/555324

In Internet explorer 7 there is a feautre called Protected mode, which works in Vista or Windows 7 but not in XP and below versions.

Here sometimes you might have come across with this situation. Eventhough you turned ON the protection mode by going to Tools -> Internet options. Still it will show Protected mode: off.

The reasons are

1. If the User access control is disabled then this protected mode feautre will not work.

2. If you are running IE 7 with administrative privilges.

In vista or Windows 7, Microsoft introduced a new feautre called User Access Control(UAC). Its mainly introduced to increase the security but when we attempt to see that window repeatedly its more irritating rather than providing security. So here are the steps to disable and enable the UAC

1. Start -> Run -> Msconfig -> Tools -> Enable or Disable UAP. But the above one requires a reboot.

If you want to avoid reboot please follow the below 2. Start -> Run -> Regedit 3. HKLM-> Software -> Microsoft -> Windows -> Current version -> Policies -> System

On the right hand side window double click on “EnableLUA” and change the value from 1 to 0 If u want to enable UAC then change the “EnableLUA” value from 0 to 1.

4. U can also do the same thing using Control Panel -> User accounts settings but its beating around bush.

1. You will get more pop-ups of fake anti-virus or advertisements or porn pictures.

2. It keeps popping up at regular intervals.

3. Its a .exe file which gets stored in the following path

c:\Docs and settings\<username>\local setings\Application data\

and also in c:\windows\ prefetch.

4. The file name is the combination of letters and alphabets.

For eg: lkjdkjsh44df.exe, uiwofjoda465a.exe

5. You can find the same .exe file in the registry entry.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

and

HKEY_Current_User\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

6. It also creates some unwanted .dll files in the following location.

C:\Windows\System32

7. It modifies the host file so that whenever you try to open browser it redirects to some other page mostly porn website. Host file is in C:\Windows\system32\drivers\etc\

Did u recently get hit by any of the malware/ spyware?

Do u want to remove it quickly?

Just download the removal which will take care of malwares and spywares.

http://www.bleepingcomputer.com/download/anti-virus/combofix