[release] ninja pendisk!

[Nuno Brito]

ninja pendisk!

Ninja is the freeware zero-configuration program designed for guarding computers against viruses transmitted by USB pendisks.

This ninja awaits quietly in the system tray for the times whenever a USB pendisk is inserted on the computer which will be examined to uncover the commonly malicious or virulent files known as "autorun.inf" and "ctfmon.exe" amongst many others.

Waiting for a pendisk to be inserted

After cleaning a pendisk

To keep things simple, ninja is fully portable and self-contained.

This addon uses the "/install" switch which will make of copy of itself on the Program Files folder and also place a shortcut on the startup folder.

Besides removing known virulent files, the ninja will also immunize your pendisk and create a folder called autorun.inf with special protection permissions to protect your pendisk from being infected again when plugged on contaminated computers.

Visit the web page for download and more usage details: http://nunobrito.eu/ninja

[UtCollector]

Nice. The app. could use a refresh button to re detect the already inserted pendisk.

I made a dummy file called avpo.exe Ninja pendisk did detect the file. But it did not clean it even with the automatic clean option turned on.

I did plug in a pendisk with a bootable xp and it did not say anything about this file: ntdetect.com

Well i be happy to test another version.

[Nuno Brito]

Hi UtCollector!

Thanks for testing.

Inside the ninja folder you find a text file called "ninja.txt" and it contains the list of files to be removed, renamed, etc.

[attrib_initial]
autorun.inf=-s -h -r

[file_rename]
autorun.inf-->autorun.inf.old.txt

[file_delete]
auto.exe
autorun.ini
autorun.pif
autorun.vbs
autorun.exe
autorun.bat
autorun.cmd
autorun.hta
avpo.exe
Bha.dll.vbs
ctfmon.exe
copy.exe
destrukto.vbs
f***er.vbs
host.exe
Heap41a
killvbs.vbs
host.exe
imvo.exe
Macromedia_Setup.exe
mmc.exe
msvcr71.dl
ntde1ect.com
nideiect.com
ntdelect.com
New Folder.exe
oso.exe
Ravmon.exe
RavMonE.exe
RVHost.exe
spoclsv.exe
soundmix.exe
svchost.exe
semo2X.exe
tel.exe.vbs
utdetect.com
VBS_RESULOWS.A
windows.scr

[folder_delete]
Recycled

[folder_create]
autorun.inf

[attrib_finish]
autorun.inf=+s +h +r

avpo.exe is mentioned on that list so I strange the reason why it didn't deleted that file in the first place but there is a detail that was reported by other users:

Ninja will clean up the pendisk when you plug it to your machine - but if your computer is infected - then your pendisk will quickly have a new virulent file placed inside after the ninja cleanup.

-------------------------------------

I did plug in a pendisk with a bootable xp and it did not say anything about this file: ntdetect.com

It's not on the list of ninja.txt as it is used by the OS to boot.

There are however a few "similar" that are often used by viruses to spread the havoc:

ntde1ect.com

nideiect.com

ntdelect.com

could use a refresh button to re detect the already inserted pendisk.

Just unplug and plug it back into your machine.

Well i be happy to test another version.

That's really good to hear, glad you liked to use the ninja..