ntde1ect removal
Hi, I know, it goes against my principle of posting technical stuffs on our blog (don’t like showing that side of me i guess),
but i had to post this one, since everyday I go to univ, I see people complaining about this malware, that there pendrives are infected, lots of people wasting their time trying to find a clean computer, big antivirus scanning the whole system for all sort ofvirus to search for only one virus, etc.. etc.. etc..
so i wrote a simple very inefficient removal utility, it will clean your system if you are found to be infected by that ntde1ect thingy, if you are clean, you can just close the program right away.
No warranty associated whatsoever with that program, so tommorrow if after running this program your dog dies or your partner runs away with a mouse, am not to be held responsible, it is available as is.
you can download the file here: Download 528KB
here’s the md5 hash of the file for the paranos to verify it: 1B5445A4D7AF25CC75D2F1AD323345D9
Note that i wrote this coz I had nothing to do, I had no new porn to watch, and was feeling weird, so, rants about efficiency will be discarded.
works only on windows xp and 2k.
Instruction to use [easy simple 3 steps]:
1. Run the program
2. Follow instruction on screen
3. Reboot
ps. if you don’t trust me, don’t download it
pps. I haven’t given the source coz of some screwed dick heads ways of thinking.
+$3|v3n
Popularity: 5% [?]
October 27th, 2007 at 11:00 pm
You know me, and I guess you might know what I’ll ask. Tell me how you proceeded to clean that!
I want the algo!
October 28th, 2007 at 7:49 am
locate all the parts where the virus leave a trace, run keys, disk drops, process it runs, if one of these condition is true you are infected, get all related system variable (e.g %windir%), then changing the permission of the files, deleting them, when the user reboots, the dll associate is deleted before windows loads it. simple but innefficient :p one bag programming aspect :p, instead of going through all disks to find infections, which should’ve been in a for loop, i just placed it just like that without a loop,
November 25th, 2007 at 12:57 pm
I am interested in this little dude,the application i mean, not selven, though i do not have the malware.
Is the application threaded or will it just freeze the system upon memory hog? The last time some guy I know of had written a search utility, he did not thread this application properly resulting in the system to freeze.
Why do students not bring their notebooks to the university? Just plug it onto the network. Is there some form of authentication required? Is the university wireless covered?
February 8th, 2009 at 7:29 pm
I usually don