Archive for April, 2008

22
Apr
08

Remove PSW.OnlineGames.AZ, WORM_NSPM.JS and Kavo (unable to reveal hidden files)

Actually I am not sure if my pc was infected by which of these virus (PSW.OnlineGames.AZ, WORM_NSPM.JS and Kavo) but they all seems the same with the symptom below:

  1. Unable to reveal hidden files (the radio box on “folder option” doesn’t work at all).
    System registry key
    (“HKEY_LOCAL_MACHINE>Software>Microsoft>Windows>CurrentVersion>explorer>Advanced>Folder>Hidden>SHOWALL”) for revealing hidden files keep on changed after modified.
  2. Found Kavo in the system startup registry
    (“HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run”)

Verify the virus

  1. On command prompt, at location “c:\windows\system32”, type:
    c:\Windows\system32\> attrib kavo.exe -h -r -s
    c:\Windows\system32\> attrib kavo0.dll -h -r -s
    You will see these files existed (but you won’t see them in windows explore, coz they are hidden!)
  2. On system registry
    (“HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Policies>Explorer”), there is a key NoDriveTypeAutoRun = “91”.

Unfortunately, trendmirco housecall web based virus scanner and avast free edition aren’t able to pick up the virus. Thus AVG free edition is recommended to remove the file.

Generally, a few files will be removed:
c:\vt6e.cmd
c:\autorun.inf
c:\bqk.bat
c:\h8i.com
c:\windows\system32\kavo.exe
c:\windows\system32\kavo0.dll

To perfectly cure the virus, a few manual job has to be done:

  1. To enable reveal hidden files:
    On system registry
    (“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    \Folder\Hidden\SHOWALL”)

    • Delete the key “CheckedValue“.
    • Recreate the key “CheckedValue”, type “REG_DWORD“.
    • Modify the value of “CheckedValue” to “1“.
  2. On system registry
    (“HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Policies>Explorer”)

    • delete the key (NoDriveTypeAutoRun = “91”)
  3. On system registry
    (“HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run”)

    • delete the key for Kavo entry.

After all, some drive (eg. c:\) may not be accessible properly. A windows will pop up to ask for application to execute these drive. It can be solved by:

  • Donwload Flash Disinfector.exe
  • Plug in a thumb drive
  • Double click the exe file. Follow instruction and finally click “Done!”
  • Reboot

Everything should be alright and do remember: Google is our best friend.

Reference website:

  1. Trend Micro: WORM_NSPM.JS
  2. LowYat.net: May be Kavo virus
  3. beepingcomputer.com: Flash disinfector.exe
18
Apr
08

Harddisk in the future – Racetrack

IBM has come out with a latest storage technology derived from the hottest advanced nanotechnology which can “Racetrack Memory” (RM).

The basic idea relies on U-shaped nanowires that are arranged perpendicular to the surface of a chip. Bits are stored at the magnetic domain wall (DW) along the length of U-shaped nanowires. Bits can be read or written at the base of the wire. Bits can then be moved around as if they’re on a memory stack, thanks to nanosecond pulses of current applied to the ends of the U that shift all the bits to new locations on the wire.

With this technology, the device about a 3.5inches floppy disk can store up to 1TB (1000GB).

As current pulse is used to moved the bits around the U-shaped nanowires, there is no moving parts in the device, which eliminate the problem of fatigue and wearout, same as modern day flash drive.

Besides, it overcome the problems of common flash drive: limited lifetime and asymmetrical write/read speed. Flash drive has the lifetime about 10,000 – 100,000 writes due to sending large voltage into a cell will degrade it mechanically. The write speed is also 1000 times slower than its read speed.

The main problem of the device is the heat. As in proposal, 1.6V current pulses are used to move around the bits in nanoseconds, a huge amount of heat will be generated which may destroy the wire.

This technology is estimated to be panned out into marketplace within this decade. Hopefully the heat problem, which is common for every electronic devices, could be handled well.

Let’s hope there is one day where we don’t have to bother about capacity and fragility for storage device.

Further study:

  1. Storing data in three dimensions with racetrack memory
  2. Wikipedia : Racetrack Memory
  3. Wikipedia: Spintronics