- Computers & Software»
- Computer Buying Guides»
- Buying Peripherals
HOW TO MAKE YOUR USB DRIVE VIRUS RESISTANT
What kind of USB drive do you own?
Yes. It is true! It is simple and easy.
First. Format your USB drive in NTFS file system.
Second. Create a directory or folder where you will save your data, let’s say “DATA” folder; and make the root folder “read only” access to “Everyone” user group access right.
Third. Create a text file inside the “DATA” folder and rename that file into DATA.EXE. And set the security setting to “deny all” for “Everyone” user access rights. This, I fondly called “creating a fake virus” to block the real viruses.
Fourth, You acquire the ownership of your USB drive. The purpose? After formatting in NTFS file structure you can secure your USB drive or even your external hard disk drive like the way you do in securing a table in a data base. Make sure that you remove all access rights, including the access rights of “SYSTEM” group user. You can find all these features by right clicking the properties of the drive, e.g. “Drive F:” or whatever drive letter assigned by your computer to your USB drive.
If you can only configure the root folder of your USB drive “Read Only,” then you can block almost all viruses that may attempt to write in your USB drive, such as “_” dash virus, “RECYCLER” virus, “Autorun.inf” virus, “Brontoc” virus, etc., etc. You will not worry at all even if you plug in your USB drive in any computer that is full of viruses.
The instructions above is all that there is, if, you are a computer programmer. Please read the rest for detailed instructions though if you can understand the technique I cited above.
The Illustration to the right tells almost everything you need to know and to do on how to configure your USB drive “Virus Resistant”. Look, the “Permissions for Everyone”, in the “Allow”column, the “Full Control”, “Modify” and “Write” is unchecked. So, this trick blocks all attempts by any virus to write in the root directory .
HOW TO FORMAT YOUR USB DRIVE IN NTFS
The best way to format the USB drive in NTFS (New Technology File System) (or Network Technology File System) is to use the "DISKPART.EXE" command via command prompt.
The other way is to use the computer management window. Right click the computer and click manage button, and look for the disk management sub menu.
If you are using Windows 8, click "Windows" "R" key. In Windows 7, press windows key and type "DISKPART.EXE" and press the enter key. All these commands shall be run in the Administrators privilege account in windows.
If you will not convert your USB drive to NTFS file system you can cannot protect your USB drive.
Why create a DATA folder in your usb drive?
Once your USB drive is read only in the root folder, you can not save anymore any data in it. It is required that you have to make at least one folder where you can store all your data.
Any data stored in the root folder is not erasable anymore. In my usb drive, I put my installers in the root directory. The integrity of these files will not be compromised because no virus can edit them.
Note, however, that in case you want to cancel the protection of your USB drive, you can format it again.
Examine the folders in this illustration
THE BEST WAY TO CHECK IF YOUR DRIVE IS RELIABLE, IF IT COULD BE FORMATTED IN NTFS.
ACQUIRING OWNERSHIP, THE WAY TO SECURE YOUR USB DRIVE
In my many years of experience and experiments with viruses, I discovered that they are not capable of acquiring the ownership of a secured file structure. It is a good practice that once you have formatted your USB drive in NTFS file system you need to acquire the ownership of the drive because the current owner of the drive is "SYSTEM" group user, which is universal. Many viruses can easily manipulate your drive if they can have a full control of the security setting of your drive.
If you are a programmer you can easily understand what I mean. Don't worry however, if you are not a programmer. The following detailed instructions will be presented to all, in layman's way as easy as possible.
THIS IS THE SECURITY SETTING OF YOUR "DATA" FOLDER
I put an exclamation mark in my "data" folder as "!DATA" so that it will be on top of the list when I sort file in ascending order. You may do the same if you want.