|
Published: June 28, 2008
Aka: USBMalwareStopper
Version: 1.0.0
Copyright: MalwareInfo.Org
File size: 236 KB (241,664 bytes)
MD5:
c33037410ad1c5987e3695dd20d88b04
SHA1:
fd9f2eee0df6850e8b9b225cc7ca7031ff1b42d9
SHA256:
ad6a52cee65a171bdd27e5514351c45d31332e7fbbe34bdd2c39123f5eca411c
SHA512:
0f0ce3ea27c08d41852c0da4cde457b4269a993ce014f62e4ca010416c0f942b
f70bb42a75c1221b2bcba43c30815d8ec7faa27930b6e9ee3025bde7c7e96f90
Prerequisite:
DotNet Framework 2.0
Installation: Simply
extract and
run USBActivityMonitor (USBActivityMonitor.exe)
PE Structure Information:
Base Data:
Entry Point Address.:
0x4387fe
Time Date Stamp.....:
0x48919939 (Thu Jul 31 10:51:37 2008)
Machine Type...........:
0x14c (I386)
Sections:
Name Viradd Virsiz Rawdsiz Ntrpy MD5
.text 0x2000 0x36804
0x37000 7.52 fdf3ff7b35c7fcc725a1ac8e201035e4
.sdata 0x3a000 0x87 0x1000 0.33 1cdb5f7439d35c182cc8ddbf947e7a39
.rsrc 0x3c000 0x8b0 0x1000 3.15 798d94823dc1389d0a6791a159ecede3
.reloc 0x3e000 0xc 0x1000 0.01 fd820cb47aec78df391dc9568b8bded5
Imports:
> mscoree.dll: _CorExeMain
Description:
USBActivityMonitor (aka.
USBMalwareStopper) is an application that runs in the background and
monitors all the drives (fixed & removable) to detect the creation of
autorun.inf files. In recent times, there has been an increase in
Malwares that spread via USB pen drives. I am sure, everyone of us has
been troubled by these absolutely nasty Malwares that causes various
unwanted activities in our computers. The frequency in which newer
variants of these Malwares are coming out, on numerous occasions, these
get undetected by the Antivirus Software running in your computer. The AV
Vendors are finding it quite difficult to add the signatures of these
Malwares in their daily Virus Definition Updates. As a result, the menace
and threat posed by these ever increasing variants are quite significant.
USBActivityMonitor quietly monitors the
activities of USB pen drives. From the time they are plugged in till the
time they are plugged out. USBActivityMonitor will not just protect your
computer from these Malwares, but it also makes sure that others don't get
infected by your USB pen drive. USBActivityMonitor will make the Malware
(if it finds it there) inside your USB pen drive inactive.
However, at times, there are various USB
utilities, viz. Data Backup tools, File Encryption tools that also run
automatically from the USB pen drives when they are plugged in the system.
To make USBActivityMonitor super intelligent, I have provided a feature by
which you can generate the MD5 hash of these useful tools present in your
USB pen drive and place them in the exclusion list. When an autorun.inf
calls the corresponding file, USBActivityMonitor will check if the MD5 of
the app called is present in its exclusion list. If it finds it in the
exclusion list, then USBActivityMonitor will skip that file, making sure
hat the legitimate files are not detected as false positives.
Hope you will like USBActivityMonitor and
please feel free to let me know your experience with USBActivityMonitor.
Also, please let me know, if there are any bugs in the application.
|
