Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I discovered someone who I didn't want harm to befall had purchased an "Internet Radio + TV Player" USB device. I decided to see if I could view the contents of the device to see if any of it was malicious, but it seems that the device doesn't behave like a data storage device as I would have expected. I had previously thought this device was a simple autorun executable on a USB stick, but it appears there is more to this thing than I had thought previously. Whatever means it has of operating on a Windows machine isn't the same path available on a Linux machine it appears.

I had gone to a conference where USB keys were being handed out and it just so happens that the exact same generic appearance and what I perceived to be same form factor, but closer examination reveals differences. Below is a photo of the two devices side by side where the upper device has had a GIMP alteration to blur out the company logo. The upper USB device in the photo is a standard 2GB USB drive where the lower is the USB thumb drive I'm attempting to examine. The unit in question has the characters BCW017 etched on the enclosure/surface of the connector whereas the 2GB drive is void of these markings. There are no other noticeable visual differences between the two other than branding.

Is there any way to read the content of the mysterious USB drive or is it embedded hardware I'm seeing here?

USB Drive Comparison

Running lsusb reveals this information about the Internet Radio/TV USB:

Bus 001 Device 023: ID 6610:6610  
    Device Descriptor:
      bLength                18
      bDescriptorType         1
      bcdUSB               2.00
      bDeviceClass            0 (Defined at Interface level)
      bDeviceSubClass         0 
      bDeviceProtocol         0 
      bMaxPacketSize0        64
      idVendor           0x6610 
      idProduct          0x6610 
      bcdDevice            0.00
      iManufacturer           1 produc
      iProduct                2 Udisk2.
      iSerial                 3 2012061513070156
      bNumConfigurations      1
      Configuration Descriptor:
        bLength                 9
        bDescriptorType         2
        wTotalLength           32
        bNumInterfaces          1
        bConfigurationValue     1
        iConfiguration          0 
        bmAttributes         0x80
          (Bus Powered)
        MaxPower              100mA
        Interface Descriptor:
          bLength                 9
          bDescriptorType         4
          bInterfaceNumber        0
          bAlternateSetting       0
          bNumEndpoints           2
          bInterfaceClass         8 Mass Storage
          bInterfaceSubClass      6 SCSI
          bInterfaceProtocol     80 Bulk-Only
          iInterface              0 
          Endpoint Descriptor:
            bLength                 7
            bDescriptorType         5
            bEndpointAddress     0x81  EP 1 IN
            bmAttributes            2
              Transfer Type            Bulk
              Synch Type               None
              Usage Type               Data
            wMaxPacketSize     0x0040  1x 64 bytes
            bInterval               0
          Endpoint Descriptor:
            bLength                 7
            bDescriptorType         5
            bEndpointAddress     0x01  EP 1 OUT
            bmAttributes            2
              Transfer Type            Bulk
              Synch Type               None
              Usage Type               Data
            wMaxPacketSize     0x0040  1x 64 bytes
            bInterval               0
    Device Status:     0x0000
      (Bus Powered)

Running lsusb against the 2GB USB reveals:

Bus 001 Device 022: ID 090c:1000 Silicon Motion, Inc. - Taiwan (formerly Feiya Technology Corp.) 64MB QDI U2 DISK
Device Descriptor:
  bLength                18
  bDescriptorType         1
  bcdUSB               2.00
  bDeviceClass            0 (Defined at Interface level)
  bDeviceSubClass         0 
  bDeviceProtocol         0 
  bMaxPacketSize0        64
  idVendor           0x090c Silicon Motion, Inc. - Taiwan (formerly Feiya Technology Corp.)
  idProduct          0x1000 64MB QDI U2 DISK
  bcdDevice           10.00
  iManufacturer           1 
  iProduct                2 
  iSerial                 3 11050762000196
  bNumConfigurations      1
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength           32
    bNumInterfaces          1
    bConfigurationValue     1
    iConfiguration          0 
    bmAttributes         0x80
      (Bus Powered)
    MaxPower              200mA
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass         8 Mass Storage
      bInterfaceSubClass      6 SCSI
      bInterfaceProtocol     80 Bulk-Only
      iInterface              0 
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval             255
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x02  EP 2 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval             255
Device Qualifier (for other device speed):
  bLength                10
  bDescriptorType         6
  bcdUSB               2.00
  bDeviceClass            0 (Defined at Interface level)
  bDeviceSubClass         0 
  bDeviceProtocol         0 
  bMaxPacketSize0        64
  bNumConfigurations      1
Device Status:     0x0000
  (Bus Powered)

The difference between the two comparing results of lsusb:

Left file: withRadioTv.log     Right file: with2GB.log
716 Bus 001 Device 023: ID 6610:6610               <> 716 Bus 001 Device 022: ID 090c:1000 Silicon Motion, Inc. - Taiwan (formerly Feiya Technology Corp.) 64MB QDI U2 DISK
------------------------------------------------------------------------
------------------------------------------------------------------------
725   idVendor           0x6610                    <> 725   idVendor           0x090c Silicon Motion, Inc. - Taiwan (formerly Feiya Technology Corp.)
726   idProduct          0x6610                       726   idProduct          0x1000 64MB QDI U2 DISK
727   bcdDevice            0.00                       727   bcdDevice           10.00
728   iManufacturer           1 produc                728   iManufacturer           1
729   iProduct                2 Udisk2.               729   iProduct                2
730   iSerial                 3 2012061513070156      730   iSerial                 3 11050762000196
------------------------------------------------------------------------
------------------------------------------------------------------------
741     MaxPower              100mA                <> 741     MaxPower              200mA
------------------------------------------------------------------------
------------------------------------------------------------------------
760         wMaxPacketSize     0x0040  1x 64 bytes <> 760         wMaxPacketSize     0x0200  1x 512 bytes
761         bInterval               0                 761         bInterval             255
------------------------------------------------------------------------
------------------------------------------------------------------------
765         bEndpointAddress     0x01  EP 1 OUT    <> 765         bEndpointAddress     0x02  EP 2 OUT
------------------------------------------------------------------------
------------------------------------------------------------------------
770         wMaxPacketSize     0x0040  1x 64 bytes <> 770         wMaxPacketSize     0x0200  1x 512 bytes
771         bInterval               0                 771         bInterval             255
                                                      772 Device Qualifier (for other device speed):
                                                      773   bLength                10
                                                      774   bDescriptorType         6
                                                      775   bcdUSB               2.00
                                                      776   bDeviceClass            0 (Defined at Interface level)
                                                      777   bDeviceSubClass         0
                                                      778   bDeviceProtocol         0
                                                      779   bMaxPacketSize0        64
                                                      780   bNumConfigurations      1
------------------------------------------------------------------------
share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.