Nuno Brito Posted April 10, 2008 Share Posted April 10, 2008 ninja pendisk!Ninja is the freeware zero-configuration program designed for guarding computers against viruses transmitted by USB pendisks.This ninja awaits quietly in the system tray for the times whenever a USB pendisk is inserted on the computer which will be examined to uncover the commonly malicious or virulent files known as "autorun.inf" and "ctfmon.exe" amongst many others.Waiting for a pendisk to be insertedAfter cleaning a pendiskTo keep things simple, ninja is fully portable and self-contained.This addon uses the "/install" switch which will make of copy of itself on the Program Files folder and also place a shortcut on the startup folder.Besides removing known virulent files, the ninja will also immunize your pendisk and create a folder called autorun.inf with special protection permissions to protect your pendisk from being infected again when plugged on contaminated computers. Visit the web page for download and more usage details: http://nunobrito.eu/ninja Link to comment Share on other sites More sharing options...
UtCollector Posted April 15, 2008 Share Posted April 15, 2008 Nice. The app. could use a refresh button to re detect the already inserted pendisk.I made a dummy file called avpo.exe Ninja pendisk did detect the file. But it did not clean it even with the automatic clean option turned on.I did plug in a pendisk with a bootable xp and it did not say anything about this file: ntdetect.comWell i be happy to test another version. Link to comment Share on other sites More sharing options...
Nuno Brito Posted April 22, 2008 Author Share Posted April 22, 2008 Hi UtCollector!Thanks for testing.Inside the ninja folder you find a text file called "ninja.txt" and it contains the list of files to be removed, renamed, etc.[attrib_initial]autorun.inf=-s -h -r[file_rename]autorun.inf-->autorun.inf.old.txt[file_delete]auto.exeautorun.iniautorun.pifautorun.vbsautorun.exeautorun.batautorun.cmdautorun.htaavpo.exeBha.dll.vbsctfmon.execopy.exedestrukto.vbsf***er.vbshost.exeHeap41akillvbs.vbshost.exeimvo.exeMacromedia_Setup.exemmc.exemsvcr71.dlntde1ect.comnideiect.comntdelect.comNew Folder.exeoso.exeRavmon.exeRavMonE.exeRVHost.exespoclsv.exesoundmix.exesvchost.exesemo2X.exetel.exe.vbsutdetect.comVBS_RESULOWS.Awindows.scr[folder_delete]Recycled[folder_create]autorun.inf[attrib_finish]autorun.inf=+s +h +ravpo.exe is mentioned on that list so I strange the reason why it didn't deleted that file in the first place but there is a detail that was reported by other users:Ninja will clean up the pendisk when you plug it to your machine - but if your computer is infected - then your pendisk will quickly have a new virulent file placed inside after the ninja cleanup.-------------------------------------I did plug in a pendisk with a bootable xp and it did not say anything about this file: ntdetect.comIt's not on the list of ninja.txt as it is used by the OS to boot.There are however a few "similar" that are often used by viruses to spread the havoc:ntde1ect.comnideiect.comntdelect.comcould use a refresh button to re detect the already inserted pendisk.Just unplug and plug it back into your machine.Well i be happy to test another version.That's really good to hear, glad you liked to use the ninja.. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now