Siamcafe.net Tips & Technic Computer network
Pages: 1
ã¤ÃÇèÒ¤ÅÔ¡¢ÇÒ -> Open »ÅÍ´ÀÑ ¤Ô´ãËÁèä´é¹Ð¤ÃѺ By: shonmiccorn Date: Ҿѹ 07, 2008, 03:09:28 PM
                                                                                               -----------á»Åä·Â¡Ñ¹ ÍҠͧ ´éÍ -*- --------------

Disk Knight: a new virus “protection” program

UPDATE:
After having several thousand people visit my blog, obviously because Disk Knight is pissing them off, I thought it might be nice to post some step-by-step instructions on how to rid yourself of this nuisance. Follow these instructions at your own risk.

These instructions courtesy Precise Security:
1. Temporarily Disable USB Drive to autorun (Windows XP):

a. Open Windows Explorer or press the Windows + “e” key.
b. Right-click the drive of the USB Drive. Then select Properties. Drive Properties will appear.
c. Select the AutoPlay tab.
d. Choose Select an Action to Perform
e. At the bottom of the selection, click Take no Action, then click Apply.
f. Click OK to exit Drive Properties.

2. Show Hidden Files
a. Open Windows Explorer
b. Go to Tools > Options
c. On View tab, mark Checked the “Show Hidden Files and Folders and “Hide Protected OPerating System Files” Unchecked.

3. Delete the files manually
a. Go the USB Drive and delete autorun.inf
b. Go to C: Drive and delete autorun.inf
c. Go to C:\Windows and delete Disk Knight.exe

4. Modify Windows Registry
a. Go to Start > Run then type regedit
b. On Registry Editor, go to Edit > Find and type “knight”
c. Delete all entries it found.

5. Connect to Internet and update your AntiVirus

6. Reboot your computer in SafeMode
a. During BootUp process Press F8 continuously until selection appears
b. Use Arrow Up+Down to select SafeMode on the selections menu.
c. Hit Enter to proceed.

7. Scan your computer with an updated AntiVirus and delete all infections it founds.

Note: You may enable autorun of the USB Drive by reversing the process in Step 1.

¢éÍÁÙÅ
http://www.mikeyleung.ca/2007/08/07/disk-knight/
http://www.bleepingcomputer.com/startups/Knight.exe-20407.html

¹Õè¤×Í autorun.inf ¢Í§ malware µÑǹÕé

[autorun]
open=Knight.exe open
icon=Knight.exe,0

shellexecute=Knight.exe open

shell=auto

action=Disk Knight(Protection Against Mobile Disk Viruses)

shell\auto=&Auto
shell\auto\command=Knight.exe open

shell\open=&Open
shell\open\command=Knight.exe open

shell\explore=E&xplore
shell\explore\command=Knight.exe open

shell\find=S&earch...
shell\find\command=Knight.exe open

shell\install=&Disk Knight
shell\install\command=Knight.exe open

¨ÐàËç¹ä´éÇèÒÊÑè§ÍÐäÃÁѹ¡çâ´¹ Scrip ÊÑè§ãËéÃѹ Knight.exe

ÇÔ¸Õ·Õè»ÅÍ´ÀÑ·ÕèÊØ´
1. »Ô´ autorun (ÂéӡѹËÅÒÂÃͺáÅéÇ)
2. ãËé¾ÔÁ¾ì·Õè address bar ´éÒ¹º¹á·¹ â´Â¾ÔÁ¾ì [X]: ([X]=ä´Ãì¿·Õèµéͧ¡ÒÃà»Ô´)

ÃÙéÊÖ¡ÇèÒ Mouse ¨Ð¡ÅÒÂà»ç¹áËÅè§á¾Ãè¡ÃШÒÂãËÁèáÅéÇÊÔ¹Ð


Network by siamcafe.net | Memory server MemoryToday.com |Tuned by  | Special thanks Tdelphi  

copyright©2001 siamcafe.net allrights reserve