Printable View
My flash drive is a bit "promiscuous" as in it is in and out of various machines all day. ;) I find myself formatting it a couple of times a day because of virus infections. I was wondering if anyone knew of a way to write protect it to prevent infections.
Btw. it has no write-protect switch...
Thanks.
Hmm this is an interesting case, I guess I would have to say that you should consider investing in a drive that does have a read-only switch..
You might want to check this out:
http://www.worldstart.com/tips/tips.php/1917
Cheers
I'm amazed that these aren't more easily available. I was given one a couple of years ago (at the time, a massive 32MB) and hardly let it out of my sight!Quote:
Originally Posted by oofki
Yeah, a drive with a switch. That would be ideal... however out in this part of the world they seem to be as rare as hen's teeth. Do you know of any specific models?
DjM: Thanks that looks really interesting. Gonna give it a try and will let you guys know of the results.
Hi,
Try looking for "RIDATA" from the RITEK Corporation:
http://www.ridata.com/asia_en/product_fm_6.htm#03
You want the "Twister" or "Slider" models. They also come with partitioning and password protection software.
:)
EDIT: also try looking here:
http://www.bluesting.co.za/computers/memory/usb-flash/
The Kalliba has a write protection switch for one ;)
Yeah I saw that Bluesting website. The information on it is a bit old I think... Kalliba went out of business a while ago and the buy now link does not get you anywhere useful. Also Ridata only import their optical media here.
I tried the antivirus idea from DjM, I think the article was written for an older version of Avira, because the new one is way to OS integrated and does not work on the flash drive outside of the machine it was installed from.
Well I'll keep trying... there has to be a way to prevent writing to a disk. I mean you had sector level write protection software for servers in days gone by.
Hmmm,
Can you get any of these:
PockiDrive
Trek/TrekStor
Imation
?
OK, here ya go:
http://www.buyathome.co.za/goshoppin...puters&colour=
AXIZ is a local company so you shouldn't have any problems :)
Well, I am not sure if a USB drive can be formatted with a NTFS file system on it or not. I do not remember if I had seen the option in the FS list while formatting the drive. But if there is then the problem is solved.
I bought a flashdrive with a write protect switch for the same reason. I currently have a 2gb version from pqi. They have 4gb ones as well but didnt have them in stock at the time i ordered mine.
As a side note, there are some worms that can still infect your flash drive even with the write protect switch set. I found this out the hard way with brontok and/or the rjump worm. Nasty lil buggers, took me 2 months to fully clean them out of my work place.
The answer is "yes it can" and a good "how to" is here:
http://www.ntfs.com/quest22.htm
However, I wouldn't recommend it if you use Win XP as strange and undesirable things can happen, particularly if you are moving it from one machine to another.
:shocked:
You must remove the drive using the "Safely Remove Hardware" option. Otherwise you run the risk of losing cached information that has not been written to the drive and even corrupting the drive itself.
I know there are manufacturers that suggest that you don't have to do this, but please remember that they supplied you with a drive formatted as FAT and the optimisation set to quick removal ;)
Also, NTFS will probably give you less working space and, as it is a journaling file system it will cause more write activity.
Again Fat16/32 is much more operating system compatible than NTFS which may or may not be an issue?
OK, giving the NTFS thing a try. I found that after you formatted the drive NTFS you can then change the policy back to optimize for quick removal and still leave it NTFS formatted so that might solve that problem.
Oh well, nihil is right.
I am a Linux user and seldom use Windows now. Now let me tell you a very interesting but unfortunate thing that happened to me just yesterday. I have got an external HDD in which I have a NTFS partition amongst other 3 FAT32 ones. I mounted the drive on Windows OS just to delete some data from the disk.
I forgot to unmount it and issued the shutdown command to Windows. Now, while it displayed the message "Windows is shutting down..." on the welcome screen, I plugged out the USB cable from the port. Just 1 second later a dialogue box titled 'delayed write failed came in saying Windows was unable to save the contents of the file J:\$MFT (this actually is the MASTER FILE TABLE (just for those who did not know)) properly. This might have caused data loss. Please save the file elsewhere.
And yes, it had failed. The MFT was not changed and the file that I had deleted was not deleted. It was still there.
Now there are two things:
1. It would be a BAD IDEA to format a USB drive as NTFS file system specially when u have some precious data as both undeleted and deleted data (by mistake) may create a lot of problem.
2. And the second issue is: IS WINDOWS really so slow or the NTFS MFT manipulation is so complex that it would take more than 25 seconds to just modify the MFT of a NTFS formatted drive with a moderate size and moderate number of files.
OK Guys, thank you all so much for your help. Using NTFS permissions is doing exactly what I need so consider this question answered.
:D
Quote:
Originally Posted by jockey0109
OK in response to #1 The data on this flash drive is not precious, it's mostly technical tools that I have copies of.
Secondly as I said before. Once the drive has been formatted NTFS you can then set it back to "Optimize for quick removal" and as such data corruption is much less likely.
Woha there, big fellah!
Actually that will almost guarantee data corruption and possibly rendering the flash drive unusable :eek:Quote:
Secondly as I said before. Once the drive has been formatted NTFS you can then set it back to "Optimize for quick removal" and as such data corruption is much less likely.
NTFS does not support quick removal because of its journaling and caching. You may get away with it for a while, but sooner or later you will kill your flashdrive.
Just ask yourself one question: "Why did I have to change the policy from quick removal to even get it to format in NTFS?" there was a reason ;)
EDIT:
Consider also, what the USB "quick removal" feature was designed for?
It was aimed at on the fly connection and disconnection of HIDs and the like..........that is mice, keyboards, scanners, modems, etc. Latterly we have external memory devices, printers, cameras...............my basic rule of thumb is that if the device has memory you should dismount it properly, particularly in an NTFS environment.
Ok I get what you are saying but the only thing that I can figure could go wrong is if you remove it during a data transaction because that would mess with the MFT and transaction log. I intend to use safe removal anyway, I usually always do. There may be other things that could go wrong, but I can't figure anything that could not be fixed by a format and like I said the data is not critical. I'll keep using it and report back here every so often. Also I checked, if the flash drive is rendered unusable then I'll get swapped out under warranty as the warranty booklet says nothing about not formatting the drive NTFS.
Hi GPF,
I have just done a bit of experimenting:
2 x USB cameras
2 x USB mice
2 X USB flash drives (FAT)
1 USB joystick
2 x ADSL dial-up modems
1 x XP SP2 fully patched
1 x Windows 2000 SP4 fully patched
Latest BIOS on both.
The "Safely Remove Hardware" icon in the system tray brings up a list of devices. It recognises the cameras, modems and the flash drives, but not the mice or the joystick.
My recommendation is that it would be prudent to always use the safely remove hardware for any item that appears on that list.
You would probably be OK as far as your data are concerned, as you are effectively using the drive in read only mode anyway.
I would certainly reset your device from the quick remove mode as NTFS and its operating systems do not understand that too well.
Based on drives that customers have brought to me there is an issue with NTFS and also with Win 2000/XP. What seems to happen is the MBR becomes corrupted (remember the MFT is only a part of the MBR) and the system doesn't recognise the device anymore.
Once this happens you cannot reformat the drive. Anyway, reformatting won't affect the corrupted MBR. You can get the data recovered from these drives, but I don't have the equipment and software to do it.
The reason that I also suspect the OS is that sometimes I can get the device to be recognised on one of my machines. And, quite a few of the drives I have seen this happen to were "as bought," so would have a FAT file system.
There is also the issue of some older (Dell) machines appearing to develop a "memory" such that a certain USB device will only work on a certain port. I must admit I have never figured that one out :D
Please correct me if I am mistaken, but if the MBR becomes corrupt only the volume (disk portion) of the drive would be inaccessible right? If this is the case then MBR rebuild software would fix it... right? If that is the case then there is actually free software available that can do this. eg. http://www.safe-install.com/programs...-undelete.html
What do you think?
Hi GPF,
Your theory is absolutely correct. In many cases all I do is boot to the CD and run the fixmbr command. However, that only works for Windows on a regular hard drive. It doesn't matter if it is external with a USB connection, it is still a regular drive and Windows looks on it as being one.
Flash drives and cards work differently, and are looked upon as such by Windows. There is a reserved part of the drive or card where it stores its firmware and equivalent of an MBR.
So, if you corrupt this part, Windows does not recognise it and you cannot gain access to fix it. A similar situation would occur if you screwed up the firmware part of your regular hard drive or optical drive. Windows can't fix it because you are in the drive manufacturer's territory. [Reminds me of the old Trade Union disputes over demarcation lines :D]. In fact, Windows won't even see it.
Another example is when you stiff the BIOS on your motherboard. Basically the machine won't boot unless you replace the BIOS chip. OK that is for us mere mortals, I am sure that the OEMs have the kit to re-flash it in situ.
I believe that the same goes for flash sticks and cards. Part of the firmware/software is installed at the factory, and cannot be accessed by normal means. You would need a device that would effectively see the stick or card as a blank, and literally blitz the firmware over the top of it.
I am sure that you can buy this equipment, but I am equally sure that it will be very expensive, so I have never bothered to look.
The bottom line is that when that part of your flash memory gets corrupted, your system cannot see the device so you cannot access it to do a repair.:(
Hmmm interesting indeed. Thanks for the insight. :D