IT Security Basics: Protecting a PC against computer virus injection from USB drive

Preface

I wrote this article to educate computer users on how to stop computer viruses spreading from their USB flash drive to their PC in simplest ways.

Introduction

What is a USB? It is a set of connectivity specifications developed by Intel in collaboration with industry leaders. USB allows high-speed, easy connection of peripherals to a PC. When plugged in, everything configures automatically. USB is the most successful interconnect in the history of personal computing and has migrated into consumer electronics (CE) and mobile products. With this technology, USB flash drives was developed and it allowed consumers to one can transfer and store large files from one PC to another. Honestly, I really love my 16GB USB pen drive because it's really handy and it can store my favorite songs, pictures and PC applications. Done with my story, let's go to our main topic which is the basic tips yet effective on how to protect your PC from virus infection when using USB flash drive.

Security Tips:

• First of all, always have updated antivirus software. If you want free antivirus software, go to websites below:

http://www.avira.com - Avira
http://www.grisoft.com - AVG

• Disable the feature "AutoRun". To avoid viruses automatically injecting themselves to your PC (Windows XP), just follow the simple steps below:

1. Click the Start button, then Run and enter "gpedit.msc" without the quotes
2. Go to Computer Configuration -> Administrative Templates -> System
3. Scroll down to "Turn off Autoplay" and double click on it
4. Click on the "Enabled" radio button, then for "Turn off Autoplay on" select "All drives"

• In case you don't want to perform the second tip above, just keep holding the "Shift" key when you insert a USB flash drive, this will cancel the "autorun" feature. Nice isn't it?

• Remember the rule of thumb "Always scan all removable storage when inserted".

• If you want to permanently disable USB feature on your PC, follow the steps below:
1. Open Registry Editor. Go to Start->Run then type “regedit”
2. In Registry Editor, navigate to the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR
3. Locate the following value (DWORD): "Start" and give it a value of "4".
4. Close the Registry Editor. No need to reboot the PC for the changes to apply.
5. If you want to enable the USB feature again, just locate the value (DWORD) "Start" and put back the original value "3".

– This is very helpful in situation wherein your brother/sister sneaks to your computer to install unwanted software when you're not around. It happened to me thrice, trust me...

Once again, thank you for your time and I hope this article widened your IT security knowledge. Please pass it to your friends!


Cheers,

Engr. Ralph Payumo, CCNA CCSP Security+
Security Analyst


References:
http://www.intel.com/technology/usb/
http://www.petri.co.il/disable_usb_disks.htm