Random thoughts

[Olive]

Smarties are delicious!!!!

The worst thing about smarties is the are made by Nestles

[ThunderTitan]

Anybody here knows how to remove Disk Knight in WinXP system?

c:/format it's the only way to make sure.

[Pol]

Anybody here knows how to remove Disk Knight in WinXP system?

c:/format it's the only way to make sure.

Unfortunatelly for you TT that wouldn't be having any of desired effect. It says Disk Knight is USB malware-protecting utility, copying yourselves everywhere.

Here's recipe how to get it off. In principle, disable USB autoplay option and then delete all occurences of autorun.inf and disk knight.exe everwhere. If it will appears to be locked unlocker will helps you to shoot it down. For sure in the final scan computer for viruses clasically.

[Ceres]

Heh, thanks Mr. Pol and TT though your way is um...

I tried something that I saw from some random site, but I think it didn't work because I can feel that the PUA is still roaming around my computer. It says something about the attribute. Though I am doubtful about the process, I stil l did it. Also there are some sites that suggest to clear the registry but I want to know why, ofcourse. I tried that one too, dunno if it would have a grave effect.

So let us say I followed the instruction of removing that DK, how would I know that it's really gone?

Also there are different persons each with their own USB and inserts it to my computer. I know that some or probably most are a bearer of this PUA because one time my AVG scanned a threat named Knight.exe from one of the users' USB. And my computer rarely open a USB successfully. So would this one from the guide help:
1. Temporarily Disable USB Drive to autorun (Windows XP) ?

I want to know, since I want to prevent that DK from spreading and if possible I want to terminate and delete that program from their USB before it copy itself to my computer.

Thanks!

[ScarlettP]

Ouch! I had that rotten Malware crap on my computer! It took my geek son over TWO HOURS to get rid of all of it. He ended up running "SmitFraudFix" and re-installing "SpyBot Search & Destroy" for me.

[Ceres]

Actually they said its a beneficial virus. I agree with that because it lessen my work load! Those people who want their work to be printed using my printer cannot do it at all because of DK. But when I watch them frown and cry, "OMG, my work! my work!" I pity them, so I decided to kick this thing off.

[ScarlettP]

That's when you should give that stupid blank look and ask, "I'm sorry? Was that something important?"

[ScarlettP]

Arrrgh! Off to the dentist with me.

These guys better be GOOD! Hell's Bells! I'm paying them $488 to clean 1/2 of my teeth today, and the same again on Wednesday to clean the other half. Yeah - I know. This is MORE than a cleaning. They're going to numb me up and clean out all the tarter - tarter that I didn't know I had... I brush twice a day! But this is some sort of 'special' cleaning to start getting my gums back in good health before working on my teeth. GEES! It sucks to get old!

[Kalah]

The last time I was at the dentist, I payed about $400 - and that was for cleaning and a pre-emptive fix of some would-be holes. I thought that was expensive. Still, now I don't have to visit the dentist for a couple of years.

[Omega_Destroyer]

Have you been flossing regularly Scarlett? I used to get nagged to death about it when I got my teeth cleaned.

[Ethric]

I used to get holes in my teeth often, I don't anymore... since most of it is by now artificial material

[Kalah]

There's nuthin' quite like titanium, is there...

[ThunderTitan]

I think that gay rule applies exclusively into Veldrynus.

What, Gay rules over Veldrynus?! So that's why he's always so grumpy when he posts on the forum... coz he's sitting down.



How's that for random...

I used to get holes in my teeth often, I don't anymore... since most of it is by now artificial material

Don't remind me... i had 2 fillings and a small cavity when i went to the dentist last spring... when it was finished half my mouth is fillings...

[Pol]

@Ceres
Gaah, outside enemious usb device, damn. Yes, here's way how to restrict an usb device to not be able to run any executables from here. That would help you after your main computer is cleaned.

The only problems are archived files, as someone may come and extract it from usb to hdd and all it's back again. However archived files can be set to be checked by antivirus program by real time check, that should prevent it.

First step - disable autorun
>> http://www.llbbl.com/2006/06/13/how-to- ... -autoplay/

Second step - delete autorun.inf + knight.exe
>> Go to Folder, menu Tools >> Folder Options >> View >> check Show hidden files and folder.

Perform a classic search for all these files, simply by putting

Code: Select all

autorun.inf knight.exe

into search field.

Third step - delete them
Yes, the file may complain about attributes and or by message this process is used by another process or similar. To easy your work use unlocker which I linked befor. Unlocker can remove files currently in use. Ignore the system blablings, after all you are removing virus not a system component.

Step four - prohibit running an executable from usb drive
(I will look into that later, should be in policy somewhere... >> it's here)
If that sounds complicated it's not a necessary step, it's of course, preventing to run executables from any usb drive under your account, so it's having some drawbacks...

PS You will see all running files in Task Manager
right click on ms toolbar, pick it, switch to processssses window and look for knight.exe if it's listed - if it's not after restart then, hu, you are clean

[Gaidal Cain]

The last time I was at the dentist, I payed about $400 - and that was for cleaning and a pre-emptive fix of some would-be holes. I thought that was expensive. Still, now I don't have to visit the dentist for a couple of years.

Last time I was at the dentist, I didn't have to pay a cent, even though they took one of my wisdom teeth. There's a great deal here were you pay something like 5 dollars each month, and I don't have to pay for examinations or fixing holes.

[Kalah]

That's totally cool; we pay a third to half of everything we earn in taxes, yet we only have full dental coverage until the age of 18. If your total medical bill exceeds a certain amount in a year, however, you can get a refund from the government - so at least that's something.

[asandir]

we don't have public dental care after high school, so it's user pays, that's why I don't go

[Veldrynus]

I think that gay rule applies exclusively into Veldrynus.

What, Gay rules over Veldrynus?! So that's why he's always so grumpy when he posts on the forum... coz he's sitting down.

I'm not sure I'm 100% getting this, but I think it's safe to assume it's offensive! Damn you, TT! You're so gay!

[asandir]

ahhhh you two .... just get a room

[Ceres]

Step four - prohibit running an executable from usb drive
(I will look into that later, should be in policy somewhere... >> it's here)
If that sounds complicated it's not a necessary step, it's of course, preventing to run executables from any usb drive under your account, so it's having some drawbacks...

Yeah, this process seems techy. It includes modifying the paths. But I'm still taking a look about it and probably consider it later. I just need more knowledge about this, maybe. And for drawbacks, yeah... have thoughts of those.

One thing I can think about it is for example let us say there's an installer saved on my USB and my pc prohibits running an executable from the said drive then I cannot install it at all? And so I need to reverse the process again to be able to install the program? I'm really not sure about it. And do you know any other drawbacks?