10:00 AM
Paul B
I happened upon some really awesome little tools the other day that I thought I would share with you. Have you ever been at work and had some file that someone needed and they handed you a USB thumb drive and asked you to save the file on it for them? I'm sure you have.
Likewise, I've been watching a lot of the TV series 24 lately, and in the season finally of season 8 Chloe had to plug in an SD card and upload the contents to Arlo back at CTU before the people involved with the conspiracy could stop her. If she had the tool I'm about to show you running, it wouldn't have been an issue.
The first tool was built with Autoit, and is called USB Hidden Copier. From their page:
USB Hidden Copier copies all the content of all the USB drives that have been inserted in the system and will save it to the hard drive. This process is invisible and the user doesn’t know that his or her content has been copied.
Setup is super easy, just run it, set your options and bam! It's running in the background. The process runs as systemidle.exe so the average person won't suspect it.
Another program that does the same thing, although not as covertly but is more stable, is called USB Guard. This program displays a system tray icon, and you can set options to display a fake "antivirus" check when a USB drive is inserted, or you can have it display nothing at all. I found that this program has less issues than USB Hidden Copier. From their page:
The Secret USB Copier enables you to automatically copy files from connected USB drives to your hard drive. It detects plugged-in removable drives and scans their files without letting the owner know. You can set filters depending on which files you want to copy. It provides lots of customization possibilities, such as file size, extension, date and more. The tool can run completely invisible or imitate a fake USB Guard (Malware protection).Here are some screen shots:
No matter what program you choose, the next time a co-worker plugs their USB key into your computer, you can steal their files without them even knowing it. Likewise, if you have a secret recording that implicates the President that needs to be uploaded to CTU, you will automatically have a backup!
