Recommended Posts

ninja pendisk!

Ninja is the freeware zero-configuration program designed for guarding computers against viruses transmitted by USB pendisks.

This ninja awaits quietly in the system tray for the times whenever a USB pendisk is inserted on the computer which will be examined to uncover the commonly malicious or virulent files known as "autorun.inf" and "ctfmon.exe" amongst many others.

Waiting for a pendisk to be inserted

get_started.jpg

After cleaning a pendisk

immunizated.jpg

To keep things simple, ninja is fully portable, self-contained and requires no installation.

Besides removing known virulent files, this tool will also immunize your pendisk and create a folder called autorun.inf with special protection permissions to protect your pendisk from being infected again when plugged on contaminated computers.

Visit the web page for download and more usage details: http://ninjapendisk.com

:)

Edited by Nuno Brito
Link to comment
https://www.neowin.net/forum/topic/629861-ninja-pendisk/
Share on other sites

@colin_uk: thank you, I'm really happy that you like it.

@Raa:

The ninja will prevent you from running the virus inside the pendisk, once it is placed on the system tray - everytime you add a pendisk on the computer our ninja will detect and open a pop-up menu asking if the pendisk should be immunized.

This works even faster than XP/Vista when displaying the initial menu and will remain on top of any other windows so that you can clean & immunize.

Here is the list of exe's that will be removed:

auto.exe

autorun.inf

autorun.ini

autorun.pif

autorun.vbs

autorun.exe

autorun.bat

autorun.cmd

autorun.hta

avpo.exe

Bha.dll.vbs

ctfmon.exe

copy.exe

destrukto.vbs

****er.vbs

Heap41a

killvbs.vbs

host.exe

imvo.exe

Macromedia_Setup.exe

mmc.exe

msvcr71.dl

ntde1ect.com

nideiect.com

ntdelect.com

New Folder.exe

oso.exe

Ravmon.exe

RavMonE.exe

RVHost.exe

spoclsv.exe

soundmix.exe

svchost.exe

semo2X.exe

tel.exe.vbs

utdetect.com

VBS_RESULOWS.A

windows.scr

Try it on, this nifty tool was created to run in schools and office computers where admins get stuck with the annoying task of cleaning up the mess.

:)

Link to comment
https://www.neowin.net/forum/topic/629861-ninja-pendisk/#findComment-589315709
Share on other sites

UAC won't react to this sort of menace unless it is a very dumb and clumsy virus otherwise it will happily let windows run the executable as any other regular program.

If you don't believe me, try for yourself and run the autorun.inf found inside any infected USB pendisk to know what I mean.. :shiftyninja:

Link to comment
https://www.neowin.net/forum/topic/629861-ninja-pendisk/#findComment-589315772
Share on other sites

I'm assuming that the autorun feature works kinda like the autorun feature for CDs, if that's true then with Vista, a popup appears when you put the disk in. The pop up is a prompt to the user to decide what should happen.

If that happens with a pendrive, then I'd be able to stop any automatically executed executable.

Still, not as stupid-proof as this software.

Link to comment
https://www.neowin.net/forum/topic/629861-ninja-pendisk/#findComment-589317575
Share on other sites

I've just found a solution to intercept and block completely the autorun feature when a pendisk is plugged on the computer on Vista and XP machines.

Will add this feature on the ninja so that no autorun is ever executed without explicit user permission.

Wait for the next version, should be available tomorrow.

:)

Link to comment
https://www.neowin.net/forum/topic/629861-ninja-pendisk/#findComment-589317597
Share on other sites

Vista will pop up with its question when you first plug it in at first, but subsequently, clicking on the drive in the My Computer screen will just execute whatever autorun.inf points to.

The best way is just to disable autorun.inf entirely. If you create a .reg file with the following contents and import it, it'll disable reading of autorun.inf files, but still maintain the ability to automatically play CD audio, DVD movies, and use content-based autoplay. It won't clean devices like the Ninja here will, but it'll stop yourself from accidentally running things you don't want to, and it's dead easy to implement.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\autorun.inf]
"autorun"="@SYS:Software\\Microsoft\\Autorun"
@=""

Link to comment
https://www.neowin.net/forum/topic/629861-ninja-pendisk/#findComment-589317640
Share on other sites

Hi random_n!

That is a good key but it will also disable the autorun feature for other USB devices like the Vodafone internet box and requires a reboot of the machine to work properly.

This is an example where autorun is desired:

huawei-e220-vodafone-internet-box.jpg

After using that key, windows will still read this key here:

Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlersDefaultSelection\AutorunINFLegacyArrival

And use this action:

MSOpenFolder

That will open the explorer windows and show the contents of the pendisk.

---------

It is possible to supress completely the windows message that warns that a new device is plugged.

On the next ninja version you'll be able to exclusively disable or enable the autorun feature for pendisks on the fly.

:)

Link to comment
https://www.neowin.net/forum/topic/629861-ninja-pendisk/#findComment-589317688
Share on other sites

Version 1.2 is available! :)

You can either delete ninja.txt and restart ninja.exe to test the auto-update feature or download the new version from http://nunobrito.eu/ninja

log of changes:

Better language detection

Option to add a shortcut on the startup folder

Option to rename files on ninja.txt (good for autorun.inf)

Unfortunately, the option to intercept windows messages is not working as good as expected and therefore won't be included so soon.

Hope you like it.

:laugh:

Link to comment
https://www.neowin.net/forum/topic/629861-ninja-pendisk/#findComment-589321171
Share on other sites

Version 1.4 released!

  • added - option to silently clean all inserted pendisks only displaying results box
  • added - option to completely disable autoplay
  • added - when using switch "/install" from command line will silently install ninja on the computer
  • modified - failsafe values to load language
  • modified - german language was updated by native german speaker (thanks Peter)
  • modified - Add to startup option will create a shortcut on the startup folder and also copy ninja.exe and ninja.txt to a folder on Program Files

As mentioned before, the autorun box that appears when you plug a pendisk is disabled and it was not necessary to write any registry keys meaning that when you quit the program or deactivate this feature - your autorun will still work as before.

Still mentioning some special cases when the plugged USB pendisk is not just a pendisk that are not yet handled correctly (mostly because I don't have an ipod to test :p )

Hope you like this new version.

Link to comment
https://www.neowin.net/forum/topic/629861-ninja-pendisk/#findComment-589325379
Share on other sites

  • 2 weeks later...
  • 2 weeks later...
  • 4 weeks later...

Version 1.5 released!

Here are the changes:

[added] title to tray icon

[added] timer to result window

[added] ninja.txt option to disable tray menu and avoid closing ninja ([options] --> Evil_Ninja=1)

[added] ninja.txt option to change the timer on the result window ([options] --> Result_Timer=8)

[added] when clicking on option "Add to Shortcut" will create the shortcut by default to All Users

[modified] automatic clean option is now selected by default

[modified] filesize of ninja.exe reduced by 30% to ~700kb

[fixed] Popmenu on system tray is now hiding properly when user clicks outside the popmenu

This a much better version, hope you like it.

:)

Link to comment
https://www.neowin.net/forum/topic/629861-ninja-pendisk/#findComment-589431185
Share on other sites

  • 1 month later...
  • 5 months later...

I like your Ninja very Much. I have read ur thread in bootland forum about using my own language for Ninjaa Pendisk.

With only adding "language=id" for Indonesia ^^

But, it wouldn't work.Then i tried modifiying the "en" language words. However, the change doesn't comes up too??

FYI:I'm using version Ninja Pendisk 1.5.

I want to add the "id" language for my friends in indonesia.

Thanks,

Mickeel (www.mimusic.co.cc)

Link to comment
https://www.neowin.net/forum/topic/629861-ninja-pendisk/#findComment-590242550
Share on other sites

  • 3 months later...

Hi,

I was looking for a tool to do that autorun.inf removal, tried a few free software and some shareware. Yours came out to be the best, simple and deadly effective

you did a very nice work.

I am about to deploy it to our 40 school computer where we are constantly being bombarded by those nasty USB stick autorun viruses

My issue left is that i am unable to hide the result_timer even so i set 0 in the settings. putting different number also does not affect the software, it always start with 4 sec

I will be more than happy to do a donation if you can help me fix this

thanks :-)

Link to comment
https://www.neowin.net/forum/topic/629861-ninja-pendisk/#findComment-590684256
Share on other sites

  • 1 month later...
  • 4 months later...
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Well, it's good to know that they have found a workaround to a problem that they helped create, I guess...
    • Meta is reusing old DDR4 RAM in its servers instead of buying new hardware by Ivan Jenic Image: Meta The global hardware shortage isn’t exactly news, as the entire world has been struggling with rising component prices for quite some time now. And while big companies certainly aren’t as affected as the average consumer, even they aren’t opposed to the idea of saving a few (million) bucks. Meta appears to have found a way to spend less on new hardware while also putting its outdated infrastructure to use, essentially killing two birds with one stone. The company has built a custom chip that lets it reuse memory from retired servers rather than buying new hardware. The chip is called Vistara and allows for connecting old DDR4 RAM from obsolete servers into new servers that rely on DDR5. The problem Vistara solves goes back to a basic mismatch in how long hardware lasts. Meta replaces its servers every three to five years, but the memory modules inside them are good for seven to ten. When a server gets decommissioned, perfectly usable DDR4 RAM goes with it. Meta is presenting the new method at today’s ISCA symposium, but The Register has got hold of a paper that explains how Vistara works. It's a custom ASIC that bridges DDR4 memory to newer processors via aCXL 2.0/1.1 interface over PCIe Gen5 x16. Meta pulls DDR4 sticks from old machines and installs them in dedicated units it calls MemServers, each of which pairs 768GB of DDR5 with 256GB of recovered DDR4. The operating system sees the DDR4 as an additional memory node and draws from it when the primary DDR5 is running low. Off-the-shelf CXL hardware couldn't do this, so Meta built its own. Existing interfaces bundle their own memory with the controller, which makes reusing old RAM sticks impossible. But Vistara separates the controller from the memory entirely, so Meta can plug in whatever DDR4 sticks it has on hand. Meta plans to deploy the new architecture in hyperscale infrastructure with millions of servers, which should mean that Meta’s AI datacenters will now be more efficient. The company is investing heavily in AI infrastructure, especially with its new AI model, Muse Spark, now widely available. All of this doesn't mean that Meta will exclusively rely on "recycled" RAM, but the company is still looking at considerable savings at scale.
    • Save up to 87% on ChatPlayground AI lifetime subscriptions by Steven Parker Today's highlighted deal comes via our Apps + Software section of the Neowin Deals store, where for only a limited time, you can save up to 87% on ChatPlayground AI: lifetime subscriptions. ChatPlayground AI puts the world’s top AI models in one powerful interface, letting you enter a single prompt and instantly compare outputs from multiple models to choose the perfect response for your needs. Boost productivity and creativity with access to the latest AI giants like GPT-4o, Claude Sonnet 4, Gemini 1.5 Flash, DeepSeek V3, and dozens more — all in one window. Whether you’re chatting, coding, generating images, or refining prompts, ChatPlayground AI equips you with advanced tools like prompt engineering, image/PDF chat, saved conversations, and AI image creation, plus priority support to keep your workflow seamless. Access the world’s best AI models Side-by-Side Comparisons: Enter one prompt & instantly view results from multiple AI models to find the best output for your needs 40+ AI Models: Includes GPT-4o, Claude Sonnet 4, Gemini 1.5 Flash, DeepSeek V3, Llama, Perplexity, and many more Multi-Function Platform: Access AI for chat, image generation & coding all within a single interface Web Browser Extension: Offers a Chrome extension to seamlessly integrate the platform into your browsing workflow Boost productivity with powerful features ChatPlayground Interface: Designed for seamless AI model comparison in one window Prompt Engineering: Refine & optimize your prompts for better, more accurate responses Chat with Images & PDFs: Upload visuals and documents to get context-aware answers Saved Chat History: Keep track of past conversations for reference & ongoing projects AI Image Generation: Create high-quality visuals powered by top AI image models Priority Customer Support: Get faster assistance whenever you need it What you'll get with the Unlimited Plan Includes unlimited messages/month Built for prompt engineers, startups, and teams who run experiments nonstop Includes priority access to new features and future models Good to know Length of access: lifetime Redemption deadline: redeem your code within 30 days of purchase Access options: Desktop Max number of device(s): Unlimited Available to both NEW & Existing users Updates included A lifetime subscription to ChatPlayground AI (Unlimited Plan) normally costs $619, but you can pick it up for just $79 for a limited time - that represents a saving of $530 (87% off). Click the link below for more details, always check terms and specifications before making a purchase. Get this ChatPlayground AI (Unlimited) for $79 (was $619) There are also two other discounted plans to choose from. Although priced in U.S. dollars, this deal is available for digital purchase worldwide. Support queries If you have queries or need support for any of the Neowin Deals, please use the contact form here. Neowin Deals are managed and sold by StackCommerce who represent Neowin on an affiliate basis. Why we post these deals We post these because we earn commission on each sale so as not to rely solely on advertising, which many of our readers block. It all helps toward paying staff reporters, servers and hosting costs. So for those that keep moaning and complaining, be thankful we're still online for you to even do that. Other ways to support Neowin Whitelist Neowin by not blocking our ads Create a free member account to see fewer ads Make a donation to support our day to day running costs Subscribe to Neowin - for $14 a year, or $28 a year for an ad-free experience Disclosure: Neowin benefits from revenue of each sale made through our branded deals site powered by StackCommerce.
    • I like Tidal, but it still does not control devices from the mobile/app and still no surround support. And yeah re: above comment I still get a lot of network errors and I am on a 4/4 Gbit Fiber connection.
  • Recent Achievements

    • Reacting Well
      NovaEdgeX earned a badge
      Reacting Well
    • Week One Done
      NovaEdgeX earned a badge
      Week One Done
    • One Year In
      BA the Curmudgeon earned a badge
      One Year In
    • Conversation Starter
      rosiecharles earned a badge
      Conversation Starter
    • First Post
      KMilenkoski1202 earned a badge
      First Post
  • Popular Contributors

    1. 1
      +primortal
      539
    2. 2
      +Edouard
      266
    3. 3
      PsYcHoKiLLa
      151
    4. 4
      Steven P.
      98
    5. 5
      macoman
      66
  • Tell a friend

    Love Neowin? Tell a friend!