Submit a ticketCall us

Welcome to the NEW Success Center. Search all resources (documentation, videos, training, knowledge base articles) or browse resources by product. If you are unable to find what you are looking for, please contact us at customersuccess@solarwinds.com

 

 

 

 

Home > Success Center > Log & Event Manager (LEM) > USB Defender is unable to detect secure thumb drives

USB Defender is unable to detect secure thumb drives

Table of contents
No headers
Created by Interspire Import, last modified by MindTouch on Jun 23, 2016

Views: 871 Votes: 1 Revisions: 8

Windows does not write a log entry when a USB device is attached to a computer. By installing Windows Defender, the application reads the Windows API and detects it as a mass storage device. This will detach it from the computer. If the appropriate signal is not sent from the Windows API, USB Defender will not be able to detach the device.

There is one possible workaround but this may cause other issues.

The user needs to update the rule used to initiate the active responses so that it blocks all USB devices except the authorized ones.
This action may affect detection of other devices such as USB attached printers, keyboards and mouse units.

Additional information about USB Defender’s actions can be found in the TNSwind log file in the ContegoSPOP directory on the host machine.

32-bit computers - 

C:\Windows\System32\ContegoSPOP\spop

64-bit computers - 

C:\Windows\SysWOW64\ContegoSPOP\spop

Linux - 

/usr/local/contego/ContegoSPOP
Last modified
20:24, 22 Jun 2016

Tags

Classifications

Public