IOSys

There's a updated version of the Chipsbank-tool available here : http://rapidshare.com/files/74291869/CBM20....8.3.2_1122.rar It supports the 2090 and 2091 controller .. See this thread for a couple of success-stories : http://hak5.org/forums/index.php?showtopic=8614&hl=

Good to hear, thanks for letting me know :)

I don't have the hardware to test it but this contains a folder called "2091", maybe you are lucky ? http://rapidshare.com/files/74291869/CBM20....8.3.2_1122.rar

You actually paid the 5000 Ameros for thinstall ?

Well, I'm afraid that is pretty much how it will be but at least the user has to do something first to allow autorun to happen. The thing is that many people LOVE autorun so they can't just kill it entirely . Micr0$0ft and $andi$k have joined forces in some new u3-implementation, lets see what they do with u3's DRM !! exactly, there are lots of legitimate ways to use a hacked u3-drive, you could even have a Knoppix Live-Disk on one ..

I've learned quite a bit about UFD's from the usb-hacks section . True, the payloads are way to easy for skiddies but something good has come out of all this : From what I hear micr0$0ft will be ditching autorun without user-prompting all together as a direct result of the switchblade/hacksaw .. So, we managed to get m$ to remove a completely idiotic but "user-friendly" (for computer-illiterates) feature. That is some achievement IMO :-P

Social engineering 101 : Now I know that you are like 99% of people : You don't READ THE FUCKING MANUAL, ever, do you ? This "attack" has been documented in the truecrypt-manual for years and it is why truecrypt (or any other well-coded encryption-program) wipes the key(s) from RAM when you dismount the encrypted drive . If you think any "built-in-chip" like a TPM-chip that complies to US-export regulations will solve this problem.. keep dreaming . But to answer the OP's question : I don't think much about this "new" thing because there is nothing new here. You have been able to dump RAM-contents for ages provided you have physical access to the machine.

digip : Answer the question must you please ..

Glad to hear you found a tool that worked . Yes, judging by what the manual says you should be able to set up your own ISO, you can even control the size of it . The production-tool collection is here : http://forums.hak5.org/index.php/topic,8630.0.html

WARNING : THIS IS NOT FOR NOOBS . USE AT YOUR OWN RISK & RTFM COMES WITH ABSOLUTELY NO GUARANTEES .. Remove all other USB-storage devices before running Found this on a Chinese techgeek-board, it's a collection of production-tools for USB-devices, mostly flash-drives . File-names are a mess, partly because of the chinese characters used, partly because my rig doesn't have support for Chinese language and some AV's might not like that . here's the file-list : C:USBprojectProductionTools ··· AigoMiniKingMformat ··· aigo???85????? ··· ARK3143??????V1[1].3 ··· AU6368 Low Level Format ··· AU6980-6982v6[1].13 ··· CBM2090?2090E????V1[1].6.8.1??? ··· chipsbank_CMB2080_v4[1].0 ··· Fix Tools ··· flashdoctor ··· i5062-5060????????_v220_for_win98 ··· i5068??U?????V3[1].11 ··· iCreate5122??U???????V1[1].06 ··· iCreate 5062LQ ??U????? ··· iCreate i5062??U??????????V3[1].27 ··· iCreate PDx16 V1[1].14B3 ··· mmcmedic ··· MP2202??U???????V1[1].032 ··· MpTool0710 ··· NC1116??U????? ··· NC1119??U??????? ··· OTI6808 TOOL_V1[1].30 ··· PDx16V1p18 ··· phison2143-2134???? ··· phison UP8-R Format ··· SKY6201U??????? ··· skymedi_kingmax???? ··· SM32x_E0824???? ··· TRVMPION T3551?U????? ··· Ut161 ··· UT163 ··· UT163-setup-v3[1].7.1.0 ··· U?OTI2168??????1 ··· V1[1].3.3 AP&DRIVERS ··· ??Fix Tools ··· ??U?????6[1].15.00 ··· ??????????V6.18 I've tested the ones that are for hardware I have and they work . Some of these tools install custom USB-drivers that ONLY work with the supported hardware . If you are having problems working with the files try copying them to the desktop . What you can do with this : If a tool for the controller-chip your drive uses is in the collection you will, in most cases, have complete control over your hardware. You can change the removable media bit so your drive is recognised by windows as a fixed drive . That allows you to have multiple partitions, mountable on ALL windows-machines and allows to format the device to NTFS with the Windows format-tool . You can also control your devices security-functions etc etc . For controllers that support "autorun function" ( a CD-ROM device like u3 has) the tool allows you to either remove the CD-device entirely OR use your own custom CD-image . Note that the collection does not seem to contain the sandisk U3-production-tool :( WARNING : THIS IS NOT FOR NOOBS . USE AT YOUR OWN RISK & RTFM COMES WITH ABSOLUTELY NO GUARANTEES .. Remove all other USB-storage devices before running http://www.mediafire.com/?xizizzy3gsn

Hmm, VID 1976 doesn't appear in any of the vendor-lists but PID 6025 appears to be this controller : CBM2080 Flash drive controller http://www.chipsbank.com/en/product/xx/cbm2080.htm according to THIS post http://www.911cd.net/forums//index.php?sho...st&p=116954 the tool to reprogram it should be available somewhere, unfortunately the download-link is dead . But since the manufacturer probably has changed at least the VID the best way to make sure is to disassemble the drive (carefully) and read the markings on the controller-chip . ------Tools like this are not meant for "normal" users. I have a machine setup ONLY for such tasks as installing them may or may not mess with your standard usb-drivers . ABSOLUTELY NO GUARANTEES - USE THIS AT YOUR OWN RISK - and RTFM first !!! ---- EDIT : I found a collection of production-tools for USB-devices on a Chinese geek-board and uploaded the CBM2080 tool and the English manual here : http://www.wikiupload.com/download_page.php?id=35427 NOTE : Some AV's don't like the file, this could be because of the Chinese characters OR it could actually be infected so use at your own risk : http://www.virustotal.com/analisis/0bb166e...241f6493a177819 I will upload the entire collection later .

I might be able to help you depending on what brand your flash-drive is (or rather : the controller-chip) If you post the VID/PID and other info about your drive I might be able to provide you links to the necessary tools . You can get the information by downloading this nice tool from nirsoft : http://www.nirsoft.net/utils/usb_devices_view.html