Friday, September 28, 2007

Virus removal tools - Или как се оттарваваме от вируси

Тук ще напиша "препиша" :) Инфо за премахване на вируси :

Avast (Ей гу и плейара)


Microsoft (великия туул който не свърши работа при мен ) - пише че лекува двайсетина вируса

http://www.microsoft.com/security/malwareremove/default.mspx

Bitdefender :

file.gif Backdoor.IRC.Sticy.A 22336 times Download
file.gif Backdoor.K0wbot.1.2 / 1.3.A / 1.3.B 24401 times Download
file.gif BackDoor.Rebbew (A,B,C,D) 42328 times Download
file.gif Backdoor.Sticy.B 9787 times Download
file.gif I-Worm.Sircam 17659 times Download
file.gif Trojan.VB.AE 33267 times Download
file.gif Win32.Antiman.A@mm 6291 times Download
file.gif Win32.Auric.A@mm 15969 times Download
file.gif Win32.Badtrans.B@mm 9808 times Download
file.gif Win32.Bagle.A@mm 15498 times Download
file.gif Win32.Bagle.AU@mm 4149 times Download
file.gif Win32.Bagle.{C-E}@mm 4322 times Download
file.gif Win32.Bagle.FO@mm 3030 times Download
file.gif Win32.Bagz.B@mm 3530 times Download
file.gif Win32.Bride.A@mm 3221 times Download
file.gif Win32.Bride.B@mm 3240 times Download
file.gif Win32.Bride.C@mm 3049 times Download
file.gif Win32.Brontok.A@mm 5296 times Download
file.gif Win32.BugBear.A@mm 3388 times Download
file.gif Win32.BugBear.B@mm 125797 times Download
file.gif Win32.BugBear.C@mm 124816 times Download
file.gif Win32.Dumaru.A@mm 47514 times Download
file.gif Win32.Dumaru.B/C@mm 46873 times Download
file.gif Win32.Dumaru.Y@mm 46872 times Download
file.gif Win32.Elkern.A 4437 times Download
file.gif Win32.Evaman.A@mm 2814 times Download
file.gif Win32.Fizzer.A@mm 15883 times Download
file.gif Win32.Frethem.F@mm 11610 times Download
file.gif Win32.Funlove 2334 times Download
file.gif Win32.Ganda.A@mm 12386 times Download
file.gif Win32.Gibe.A@mm 51136 times Download
file.gif Win32.Gone.A@mm 6760 times Download
file.gif Win32.Holar.H@mm 17267 times Download
file.gif Win32.IISWorm.CodeRed.F 15642 times Download
file.gif Win32.Ivrol.A@mm 13975 times Download
file.gif Win32.Jeefo.A 8381 times Download
file.gif Win32.Klez.A@mm 8204 times Download
file.gif Win32.Klez.D@mm 32131 times Download
file.gif Win32.Klez.E@mm 31506 times Download
file.gif Win32.Klez.H@mm 31704 times Download
file.gif Win32.Lirva.B@mm 2755 times Download
file.gif Win32.LovGate.C@mm 58324 times Download
file.gif Win32.LovGate.C@mm 56495 times Download
file.gif Win32.LovGate.G/H/J/K@mm 59183 times Download
file.gif Win32.Mabutu.A@mm 4405 times Download
file.gif Win32.Magistr.B@mm 10270 times Download
file.gif Win32.Melare.A@mm 14260 times Download
file.gif Win32.Mimail.A@mm 86516 times Download
file.gif Win32.Mimail.C@mm 86016 times Download
file.gif Win32.Mimail.D,E,F,H@mm 86226 times Download
file.gif Win32.Mimail.I@mm 86099 times Download
file.gif Win32.Msblast.A 232257 times Download
file.gif Win32.Msblast.B 230147 times Download
file.gif Win32.Msblast.C 229900 times Download
file.gif Win32.Msblast.F 230665 times Download
file.gif Win32.Muce.A 2786 times Download
file.gif Win32.Mydoom.B@mm (Win32.Novarg.B@mm) 87266 times Download
file.gif Win32.Myparty.A@mm 7292 times Download
file.gif Win32.Neroma.A@mm 25936 times Download
file.gif Win32.Neroma.B@mm 24890 times Download
file.gif Win32.Netsky.B@mm 4067 times Download
file.gif Win32.Netsky.Q@mm 17411 times Download
file.gif Win32.Nimda.A@mm 15928 times Download
file.gif Win32.Nimda.E@mm 15834 times Download
file.gif Win32.Novarg.A@mm 85964 times Download
file.gif Win32.Nyxem.E@mm 6399 times Download
file.gif Win32.Parite.A/B/C 44861 times Download
file.gif Win32.Polip.A 9867 times Download
file.gif Win32.Sober.AD@mm 1355 times Download
file.gif Win32.Sober.A@mm 57717 times Download
file.gif Win32.Sober.B@mm 57046 times Download
file.gif Win32.Sober.C@mm 57905 times Download
file.gif Win32.Sober.D@mm 57024 times Download
file.gif Win32.Sober.F@mm 57143 times Download
file.gif Win32.Sober.O@mm 5384 times Download
file.gif Win32.Sobig.A@mm 3412 times Download
file.gif Win32.Sobig.B@mm (Palyh) 3396 times Download
file.gif Win32.Sobig.C@mm 114289 times Download
file.gif Win32.SoBig.E@mm 114316 times Download
file.gif Win32.SoBig.E@mm 113154 times Download
file.gif Win32.Sobig.F@mm 114077 times Download
file.gif Win32.Valhalla.2048 14394 times Download
file.gif Win32.Worm.Benjamin 9587 times Download
file.gif Win32.Worm.Bobax.A/C 4550 times Download
file.gif Win32.Worm.Bobax.A/C 2740 times Download
file.gif Win32.Worm.Dabber.A 2767 times Download
file.gif Win32.Worm.Korgo.A,B 2676 times Download
file.gif Win32.Worm.Korgo.C 2549 times Download
file.gif Win32.Worm.Korgo.P 3612 times Download
file.gif Win32.Worm.Korgo.R 2694 times Download
file.gif Win32.Worm.Mexer.E 4703 times Download
file.gif Win32.Worm.Mytob.BY 6171 times Download
file.gif Win32.Worm.Opaserv 25183 times Download
file.gif Win32.Worm.SQLExp.Slammer.A 13133 times Download
file.gif Win32.Worm.Welchia.A 49774 times Download
file.gif Win32.Worm.Welchia.B 48487 times Download
file.gif Win32.Yahaa.D@mm 32289 times Download
file.gif Win32.Yahaa.E@mm 31191 times Download
file.gif Win32.Yahaa.J@mm 30915 times Download
file.gif Win32.Yahaa.K@mm 31007 times Download
file.gif Win32.Yahaa.P@mm/Q@mm 31651 times Download
file.gif Win32.Zafi.A@mm 5708 times Download
file.gif Win32.Zafi.B@mm 4499 times Download
file.gif Win32.Zafi.D@mm 4701 times Download
file.gif Worm.Kibuv.A 4089 times Download


Kaspersky :



F-secure :

AntiFun
The AntiFun tool is used to protect a system from Funlove infection coming over a network. The AntiFun tool will prevent the FunLove virus from creating the dropper executable to System directory. It will not prevent any other files on the system from being infected.
Download: ftp://ftp.f-secure.com/anti-virus/tools/antifun.zip
Readme: ftp://ftp.f-secure.com/anti-virus/tools/antifun.txt


AntiSirc
The purpose of the tool is to help the removal of the Sircam worm. The removal process is rather complex and assumes deletion of multiple copies of the worm and modification of several registry keys.
Download: ftp://ftp.f-secure.com/anti-virus/tools/antisirc.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/antisirc.exe
Readme: ftp://ftp.f-secure.com/anti-virus/tools/antisirc.txt


Audit
FSAV Audit is a tool for network administrators, for generating reports of F-Secure Anti-Virus deployment in network. The tool will generate a report file, showing for each computer whether FSAV is installed, and certain properties of installed FSAV, like the product's version, whether Gatekeeper is activated, and virus signature database dates.
Download: ftp://ftp.f-secure.com/anti-virus/tools/audit.zip
Readme: ftp://ftp.f-secure.com/anti-virus/tools/audit.htm


Boo32
Boo32 is a simple boot sector read/write utility. Run it without parameters to get help on command line options.
Download: ftp://ftp.f-secure.com/anti-virus/tools/boo32.zip


BT_B_Dis
The BT_B_Dis tool is used to unlock Badtrans.b worm file, so it could be deleted after system restart.
Download: ftp://ftp.f-secure.com/anti-virus/tools/bt_b_dis.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/bt_b_dis.zip


CoolNote
CoolNote tool fixes the payload of CoolNot worm that disables Windows desktop.
Download: ftp://ftp.f-secure.com/anti-virus/tools/coolnote.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/coolnote.reg


F-Agobot
The F-Agobot utility disinfects computers infected with the certain Agobot backdoor variants. Please see the readme.txt file for more information. Alternatively you can use the F-Bot tool, that is mentioned below.
Download: http://www.f-secure.com/tools/f-agobot.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-agobot.zip

The unpacked version is available from here:
Download: http://www.f-secure.com/tools/f-agobot.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-agobot.exe
Readme: http://www.f-secure.com/tools/f-agobot.txt
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-agobot.txt


F-Bagle
The F-Bagle utility disinfects computers infected with the certain Bagle worm variants. Please see the readme.txt file for more information.
Download: http://www.f-secure.com/tools/f-bagle.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-bagle.zip

The unpacked version is available from here:
Download: http://www.f-secure.com/tools/f-bagle.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-bagle.exe
Readme: http://www.f-secure.com/tools/f-bagle.txt
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-bagle.txt

System administrators can download the JAR version from here:
Download: http://www.f-secure.com/tools/f-bagle.jar
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-bagle.jar


F-Bot
The F-Bot utility disinfects computers infected with certain variants of Agobot, Wootbot, SdBot, RBot, SpyBot, ForBot, IRCBot. Please see the readme.txt file for more information.
Download: http://www.f-secure.com/tools/f-bot.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-bot.zip

The unpacked version is available from here:
Download: http://www.f-secure.com/tools/f-bot.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-bot.exe
Readme: http://www.f-secure.com/tools/f-bot.txt
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-bot.txt

System administrators can download the JAR version from here:
Download: http://www.f-secure.com/tools/f-bot.jar
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-bot.jar


F-Bugbr
The F-Bugbr utility disinfects computers infected with W32/Bugbear.A and 32/Bugbear.B (also known as Tanat or Tanatos) worms.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-bugbr.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-bugbr.exe
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-bugbr.txt


F-Cabir
The F-Cabir utility disinfects Series 60 devices infected with Cabir worm variants SymbOS/Cabir.A to SymbOS/Cabir.Z and SymbOS/Mabir.A
Download: http://www.europe.f-secure.com/tools/f-cabir.sis
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-cabir.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-cabir.sis
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-cabir.txt


F-CIH
The F-CIH tool is used to check if a computer is infected with CIH virus. The tool terminates CIH virus process. Then a system should be cleaned with F-Secure Anti-Virus.
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-cih.exe


F-Codered
F-CodeRed is a special tool to detect and remove CodeRed.C and CodeRed.F worms from the infected computer's memory.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-codered.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-codered.exe
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-codered.txt


F-Commwarrior
The F-Commwarrior utility deactivates following SymbOS/Commwarrior worm variants:
SymbOS/Commwarrior.A, SymbOS/Commwarrior.B, SymbOS/Commwarrior.C
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-commwarrior.zip
Download: http://www.f-secure.com/tools/f-commwarrior.sis
Download: ftp://ftp.f-secure.com/pub/anti-virus/tools/f-commwarrior.sis
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-commwarrior.txt


F-Deborm
The F-Deborm utility disinfects computers infected with Deborm.R worm (also known as Worm.Win32.Deborm.R and W32/Deborm.R) and the malware that it drops to an infected system: Trojan.Win32.Killav.q, Backdoor.SDbot.gen (also known as W32/SDBot.J), Backdoor.Litmus.203 (also known as W32/Litmus.C).
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-deborm.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-deborm.exe
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-deborm.txt


F-Fizzer
The F-Fizzer utility disinfects computers infected with Fizzer worm.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-fizzer.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-fizzer.exe
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-fizzer.txt


F-Force
The F-Force utility disinfects computers infected with known variants of the following malware families: Agobot, Aimbot, Bagle, Bozori, Codbot, Dumaru, Fanbot, Forbot, IRCBot, Mitglieder, Mydoom, Mytob, Netsky, Padobot, Poebot, Rbot, SDBot, Spybot, Wootbot, Zafi. The tool requires the latest anti-virus updates (latest.zip file) to be downloaded from F-Secure's web or ftp sites. Please see the ReadMe.txt file in the download zip for more information.
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-force.zip
Download: http://www.f-secure.com/tools/f-force.zip


F-Hare
F-HARE will detect and disinfect the three known variants of the Hare virus (also known as HDEuthanasia and Krsna).
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-hare15.zip


F-IntCe
F-IntCe tool detects and disinfects the tricky INT_CE boot virus.
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-intce.zip


F-Korgo
The F-Korgo utility disinfects computers infected with the certain Korgo worm variants. Please see the readme.txt file for more information.
Download: http://www.f-secure.com/tools/f-korgo.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-korgo.zip

The unpacked version is available from here:
Download: http://www.f-secure.com/tools/f-korgo.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-korgo.exe
Readme: http://www.f-secure.com/tools/f-korgo.txt
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-korgo.txt

System administrators can download the JAR version from here:
Download: http://www.f-secure.com/tools/f-korgo.jar
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-korgo.jar


F-Lgate or F-Lovgate
The F-Lgate utility disinfects computers infected with Lovgate.A, .B, .C, .D, .F, .G, .H, .I, .J, .K, and .L worm variants.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-lgate.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-lgate.exe
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-lgate.txt


F-Locknut
The F-Locknut utility disinfects Series 60 devices infected with the Locknut.A trojan.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-locknut.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-locknut.sis
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-locknut.txt


F-Look2Me
The F-Look2Me tool detects and deactivates Look2Me from Windows 2000/XP/2003 systems. Look2Me is adware that serves pop-up advertisements. It has a guardian implementation to prevent detection and removal. The tool also restores Debug Privileges to the Administrators group.
Download: http://www.f-secure.com/tools/f-look2me.zip
Download: http://www.f-secure.com/tools/f-look2me.exe
Readme: http://www.f-secure.com/tools/f-look2me.txt


F-Lovsan
The F-Lovsan utility disinfects computers infected with W32/Lovsan.A, W32/Lovsan.B, W32/Lovsan.C worms and W32/Lovsan.E worms.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-lovsan.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-lovsan.exe
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-lovsan.jar
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-lovsan.txt


F-Mem
F-MEM tool will detect the Memorial virus (also known as Clint).
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-mem10.zip


F-Mydoom
The F-Mydoom utility disinfects computers infected with the certain Mydoom worm variants. Please see the readme.txt file for more information.
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-mydoom.zip
Download: http://www.f-secure.com/tools/f-mydoom.zip

The unpacked version is available from here:
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-mydoom.exe
Download: http://www.f-secure.com/tools/f-mydoom.exe
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-mydoom.txt
Readme: http://www.f-secure.com/tools/f-mydoom.txt

System administrators can download the JAR version from here:
Download: http://www.f-secure.com/tools/f-mydoom.jar
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-lovsan.jar


F-MydoomF
The F-MydoomF utility disinfects computers infected with the Mydoom.F worm variant. To disinfect other Mydoom variants please use the F-Mydoom utility mentioned above.
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-mydoomf.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-mydoomf.exe
Download: http://www.f-secure.com/tools/f-mydoomf.zip


F-Netsky
The F-Netsky utility disinfects computers infected with the certain Netsky worm variants. Please see the readme.txt file for more information.
Download: http://www.f-secure.com/tools/f-netsky.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-netsky.zip

The unpacked version is available from here:
Download: http://www.f-secure.com/tools/f-netsky.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-netsky.exe
Readme: http://www.f-secure.com/tools/f-netsky.txt
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-netsky.txt

System administrators can download the JAR version from here:
Download: http://www.f-secure.com/tools/f-netsky.jar
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-netsky.jar


F-Opasrv
The F-Opasrv utility disinfects computers infected with all known Opaserv (also known as Opasoft or Scrup) worm variants.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-opasrv.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-opasrv.exe
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-opasrv.txt


F-Roron
The F-Roron utility disinfects computers infected with certain Roron (also known as Roro and Oror) worm variants. Please see the readme.txt file for more information.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-roron.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-roron.exe
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-roron.txt


F-Sasser
The F-Sasser utility disinfects computers infected with the certain Sasser worm variants. Please see the readme.txt file for more information.
Download: http://www.f-secure.com/tools/f-sasser.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-sasser.zip

The unpacked version is available from here:
Download: http://www.f-secure.com/tools/f-sasser.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-sasser.exe
Readme: http://www.f-secure.com/tools/f-sasser.txt
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-sasser.txt

System administrators can download the JAR version from here:
Download: http://www.f-secure.com/tools/f-sasser.jar
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-sasser.jar


F-SdBot
The F-SdBot utility disinfects computers infected with the certain SdBot backdoor variants. Please see the readme.txt file for more information. Alternatively you can use the F-Bot tool, that is mentioned above.
Download: http://www.f-secure.com/tools/f-sdbot.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-sdbot.zip

The unpacked version is available from here:
Download: http://www.f-secure.com/tools/f-sdbot.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-sdbot.exe
Readme: http://www.f-secure.com/tools/f-sdbot.txt
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-sdbot.txt

System administrators can download the JAR version from here:
Download: http://www.f-secure.com/tools/f-sdbot.jar
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-sdbot.jar


F-Shell
F-SHELL tool will detect and disinfect the Shell.10634 Windows virus (also known as Tentacle_II).
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-shell.zip


F-Skulls
The F-Skulls utility disinfects Series 60 devices infected with the following Skulls trojan variants: SymbOS/Skulls.A, SymbOS/Skulls.B, SymbOS/Skulls.C and SymbOS/Skulls.d
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-skulls.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-skulls.sis
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-skulls.txt


F-Slammer
F-Slammer is a special tool for detection of W32/Slammer worm in the computer's memory.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-slammer.zip
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-slammer.txt


F-Sobig
The F-Sobig utility disinfects computers infected with W32/Sobig.B@mm, W32/Sobig.C@mm, W32/Sobig.E@mm and W32/Sobig.F@mm worm variants. These worms are also known as 'Palyh' and 'Mankx'.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-sobig.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-sobig.exe
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-sobig.jar
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-sobig.txt


F-Span
F-SPAN tool will detect and disinfect the Spanska.4250 virus also known as Elvira).
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-span13.zip


F-Spyaxe
F-Spyaxe is a tool to deactivate the SpyAxe/SpywareStrike installer trojan. The trojan shows a security warning message from the system tray and repetitively installs SpyAxe or SpywareStrike.
Download: http://www.f-secure.com/tools/f-spyaxe.zip
Download: http://www.f-secure.com/tools/f-spyaxe.reg
Readme: http://www.f-secure.com/tools/f-spyaxe.txt


F-Tent
F-TENT tool will detect and disinfect the Tentacle.1958 Windows virus.
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-tent10.zip


F-Trickl
F-TRICKL tool will detect and disinfect the Tentatrickle virus.
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-trickl.zip


F-Vice
F-Vice tool will detect and disinfect the polymorphic Vice virus.
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-vice14.zip


F-Vmonde
F-Vmonde tool detects and deactivates Virtumonde from Windows XP/2003 systems. Virtumonde is adware that serves pop-up advertisements. It uses special techniques to avoid removal, which are circumvented with this tool.
Download: http://www.f-secure.com/tools/f-vmonde.zip
Download: http://www.f-secure.com/tools/f-vmonde.exe
Readme: http://www.f-secure.com/tools/f-vmonde.txt


F-Warpigs
The F-Warpigs utility disinfects computers infected with W32/Warpigs.B worm.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-warpigs.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-warpigs.exe
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-warpigs.txt


F-Welchi
The F-Welchi utility disinfects computers infected with the Welchi (also known as Nachi) worm.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-welchi.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-welchi.exe
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-welchi.txt


F-Zafi
The F-Zafi utility disinfects computers infected with Zafi (also known as Erkez or Kapes) and Zafi.B worm variants.
Download: http://www.f-secure.com/tools/f-zafi.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-zafi.zip

The unpacked version is available from here:
Download: http://www.f-secure.com/tools/f-zafi.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-zafi.exe
Readme: http://www.f-secure.com/tools/f-zafi.txt
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-zafi.txt

System administrators can download the JAR version from here:
Download: http://www.f-secure.com/tools/f-zafi.jar
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-zafi.jar


Fix-Aula
Fix-Aula is a tool to repair a system configuration damaged by Aula trojan.
Download: ftp://ftp.f-secure.com/anti-virus/tools/fix_aula.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/fix_aula.zip


FixBoot
FixBoot is a small utility that overwrites a boot sector of a diskette with a standard boot code thus elimitating any diskette boot sector infection.
Download: ftp://ftp.f-secure.com/anti-virus/tools/fixboot.zip


FixPe and FixPe2
FixPe and FixPe2 utilities allow to fix false alarms of F-Prot engine on certain files that have inaccurate section information resulted from virus infection or inaccurate compression.
Download: ftp://ftp.f-secure.com/anti-virus/tools/fixpe.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/fixpe2.zip


FsKlez or F-Klez
F-Klez is a utility that disinfects a computer infected with Klez worm and Elkern virus that the worm drops.To remove Klez.E, Klez.F and Klez.H worms please use the KlezTool utility, listed below.
Download: ftp://ftp.f-secure.com/anti-virus/tools/fsklez.exe
Readme: ftp://ftp.f-secure.com/anti-virus/tools/fsklez.txt


FsNimda or F-Nimda
F-Nimda is a utility that disinfects a computer infected with Nimda virus-worm and eliminates security holes that Nimda creates in a system.
Download: ftp://ftp.f-secure.com/anti-virus/tools/fsnimda3.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/fsnimda3.jar
Readme: ftp://ftp.f-secure.com/anti-virus/tools/fsnimda3.txt

Note: If you have problems running the above mentioned FsNimda tool, you can download a different version from here:
Download: ftp://ftp.f-secure.com/anti-virus/tools/fsnimda.exe
Readme: ftp://ftp.f-secure.com/anti-virus/tools/fsnimda.txt


GetMac
GetMac tool is used to separately update FSMacro.def definition file. Note that FsMacro.def definition file is now included into all update packages available from F-Secure.
Download: ftp://ftp.f-secure.com/anti-virus/tools/getmac11.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/getmac12.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/getmac13.zip


GetBoot
Getboot is a number of utilities to copy the contents of boot sectors to a file. The getboot.bat is a batch file to save a floppy boot sector to a file, the gethboot.bat is a batch file to save a hard drive boot sector to a file and the getmbr.bat is batch file to save a hard drive MBR to a file.
Download: ftp://ftp.f-secure.com/anti-virus/tools/bat/getboot.bat
Download: ftp://ftp.f-secure.com/anti-virus/tools/bat/gethboot.bat
Download: ftp://ftp.f-secure.com/anti-virus/tools/bat/getmbr.bat
Readme: ftp://ftp.f-secure.com/anti-virus/tools/bat/readme.txt


GetMBR and PutMBR
GetMBR and PutMBR are small utilities to take a sample of an infected machines main boot record. Get_mbr copies the mbr to a file mbr.dat and put_mbr copies the file to the mbr area.
Download: ftp://ftp.f-secure.com/anti-virus/tools/getmbr.zip


GokarDis
The GokarDis tool disables Gokar worm autostart key. Download and run this REG file, restart your system and delete KAREN.EXE file in your Windows directory either manually or with F-Secure Anti-Virus.
Download: ftp://ftp.f-secure.com/anti-virus/tools/gokardis.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/gokardis.zip


KirayDis
KirayDis is a tool to disinfect Kiray worm and to undo changes it does to system configuration.
Download: ftp://ftp.f-secure.com/anti-virus/tools/kiraydis.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/kiraydis.zip


KlezTool
The Kleztool is the utility to eliminate several variants of Klez virus-worm infection and to disinfect files infected by Klez. The utility should be used together with F-Secure Anti-Virus as this tool doesn't disinfect Elkern.A and Elkern.B virus variants, that Klez.E and Klez.F worms drop. However the utility is able to disinfect files infected with Elkern.C virus that Klez.H worm drops.
Download: ftp://ftp.f-secure.com/anti-virus/tools/kleztool.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/kleztool.com
Readme: ftp://ftp.f-secure.com/anti-virus/tools/kleztool.txt


LirvTool
The LirvTool is the utility to eliminate Lirva (or also known as Avril or Avron) worm infection and to restore files and System Registry entries modified by the worm.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/lirvtool.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/lirvtool.com
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/lirvtool.txt


Magb_Dis or Disinf
Magb_Dis tool is used to 'help' APV engine in F-Secure Anti-Virus to disinfect large files encrypted by Magistr.b virus-worm. The Disinf.exe utility creates DISINF.INI file that contains computer name and it is used by AVP engine to disinfect files encrypted by Magistr.b.
Download: ftp://ftp.f-secure.com/anti-virus/tools/magb_dis.zip
Readme: ftp://ftp.f-secure.com/anti-virus/tools/magb_dis.txt


MagoldFix
The Magold.e registry fix is used to fix Registry entries modified and created by Magold.E worm. After disinfection of Magold.E worm by FSAV 5.40 or later version (or after manual disinfection) , please download and run the MAGOLD_FIX.REG file.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/magold_fix.reg


Matrix_D
Matrix_D is a tool that fixes a payload of Matrix virus that doesn's allow to restart a system after infection.
Download: ftp://ftp.f-secure.com/anti-virus/tools/matrix_d.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/matrix_d.zip


MTXDisin
MTXDisin tool removes autostarting key of MTX virus-worm dropper and after system restart the worm's dropper file will not be locked and could be deleted.
Download: ftp://ftp.f-secure.com/anti-virus/tools/mtxdisin.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/mtxdisin.zip


MultiCom
MultiComm is a utility for enabling multiple communication directories to be used with F-PROT for Windows (FPW).
Download: ftp://ftp.f-secure.com/anti-virus/tools/multicom.zip


NavidDis
NavidDis is a tool to remove autostarting key of Navidad worm and to fix EXE file startup key in the Registry.
Download: ftp://ftp.f-secure.com/anti-virus/tools/naviddis.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/naviddis.zip


OpasTool
The OpasTool is the utility to eliminate several different variants of Opaserv (or also known as Opasoft) worm infection and to restore files and System Registry entries modified by the worm.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/opastool.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/opastool.com
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/opastool.txt


PPDisinf
PPDisinf is a tool to disinfect PrettyPark worm and to fix EXE file startup key in the Registry.
Download: ftp://ftp.f-secure.com/anti-virus/tools/ppdisinf.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/ppdisinf.zip


QazDisin
QazDisin is a tool to remove QAZ work autostarting key from the Registry. This way the worm will be disinfected.
Download: ftp://ftp.f-secure.com/anti-virus/tools/qazdisin.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/qazdisin.zip


S7Disinf
S7Disinf is a tool to remove Sub7 backdoor's autolauncher from EXE file startup key. The autolauncher is used to run SubSeven backdoor every time an EXE file starts. The backdoor itself is to be removed with F-Secure Anti-Virus.
Download: ftp://ftp.f-secure.com/anti-virus/tools/s7disinf.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/s7disinf.zip


ShellFix
The ShellFix tool is used to fix Explorer startup problems resulted from unconditional termination of F-Nimda tool during its operation. If F-Nimda tool is terminated by a user or operating system while it is scanning a hard disk, there will be no icons and no taskbar on Windows desktop. To fix the problem you will have to run the SHELLFIX.REG file.
Download: ftp://ftp.f-secure.com/anti-virus/tools/shellfix.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/shellfix.zip
Readme: ftp://ftp.f-secure.com/anti-virus/tools/shellfix.txt


Sirc_Dis
Sirc_Dis utility is used to remove autostarting key of Sircam worm and to fix EXE file startup key in the Registry.
Download: ftp://ftp.f-secure.com/anti-virus/tools/sirc_dis.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/sirc_dis.zip


StagesW9x
StagesW9x is a tool is used to remove Stages worm autostartup key from the Registry and to undo other Registry changes done by the worm.
Download: ftp://ftp.f-secure.com/anti-virus/tools/stagesw9x.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/stagesw9x.zip


SwenTool
The SwenTool is the utility to eliminate Swen (or also known as Gibe.E) worm infection and to restore System Registry entries modified by the worm.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/swentool.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/swentool.com
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/swentool.txt


YahaFix
If after disinfection of certain Yaha worm variants by FSAV 5.40 or later version (or after manual disinfection) you can't start any EXE files, please download and run the YAHA_FIX.REG file.
Download: ftp://ftp.f-secure.com/anti-virus/tools/yaha_fix.reg
Readme: ftp://ftp.f-secure.com/anti-virus/tools/yaha_fix.txt


YahaTool
The YahaTool is the utility created by Kaspersky Labs to eliminate Yaha.E (or also known as Lentin.G) worm infection and to restore files and System Registry entries modified by the worm.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/yahatool.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/yahatool.com
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/yahatool.txt


McAfee:

Name Tool
Sasser Removal Tool
Bagle Removal Tool
Zafi Removal Tool
Mydoom Removal Tool
Lovsan/Blaster Removal Tool
Klez Removal Tool
Bugbear Removal Tool

Symantec :

01/11/07Backdoor.Haxdoor.S/Trojan.Schoeberl.E Removal Tool
01/04/07W32.Spybot.ANDM Removal Tool
11/29/06W32.Spybot.ACYR Removal Tool
10/19/06W32.Rajump Removal Tool
10/17/06W32.Pasobir Removal Tool
10/04/06Symantec Support Tool ActiveX Control Cleanup Tool
09/23/06Trojan.Linkoptimizer Removal Tool
09/14/06W32.Bacalid Removal Tool
03/23/06W32.Antinny Removal Tool
03/23/06Trojan.Abwiz Removal Tool
03/23/06Trojan.Exponny Removal Tool
03/23/06Trojan.Sientok Removal Tool
03/17/06W32.Davs Removal Tool
02/02/06W32.Kiman Removal Tool
01/17/06W32.Blackmal@mm Removal Tool
12/02/05W32.Secefa Removal Tool
11/10/05Backdoor.Ryknos Removal Tool
11/03/05Trojan.Lodear Removal Tool
10/20/05Symantec Mobile Threats Removal Tool
09/22/05W32.Pexmor@mm Removal Tool
08/29/05W32.Bobax@mm Removal Tool
08/17/05W32.Esbot Removal Tool
08/15/05W32.Zotob Removal Tool
07/19/05W32.Reatle@mm Removal Tool
05/16/05Trojan.Jasbom Removal Tool
04/29/05Trojan.Vundo.B Removal Tool
04/13/05W32.Mytob.AR@mm Removal Tool
03/18/05W32.Serflog Removal Tool
03/08/05W32.Kelvir Removal Tool
03/07/05W32.Serflog.A Removal Tool
02/28/05W32.Mytob@mm Removal Tool
02/03/05W32.Bropia Removal Tool
12/17/04W32.Envid@mm Removal Tool
11/22/04Trojan.Vundo Removal Tool
11/17/04W32.Bofra@mm Removal Tool
10/04/04Adware.JustFindIt Removal Tool
08/10/04Backdoor.Agent.B Removal Tool
08/04/04W32.Evaman.C Removal Tool
06/14/04W32.Erkez.B@mm Removal Tool
06/02/04W32.Korgo Removal Tool
05/20/04W32.Donk.Q Removal Tool
05/06/04Tool to reset shell\open\command registry keys
05/01/04W32.Sasser Removal Tool
04/21/04W32.Opasa@mm Removal Tool
04/20/04W32.Erkez@mm Removal Tool
04/07/04W32.Blackmal.B@mm Removal Tool
04/02/04W32.Gaobot.UJ Removal Tool
03/14/04W32.Beagle.MO@mm Removal Tool
02/18/04W32.Netsky@mm Removal Tool
01/30/04W32.HLLW.Anig Removal Tool
01/27/04W32.Mydoom@mm Removal Tool
01/19/04W32.Beagle@mm Removal Tool
01/13/04W32.Gaobot Removal Tool
10/29/03W32.Sober Removal Tool
10/03/03Trojan.Qhosts Removal Tool
09/19/03W32.Swen.A@mm Removal Tool
08/19/03W32.Sobig.F@mm Removal Tool
08/19/03W32.Dumaru Removal Tool
08/18/03W32.Welchia.Worm Removal Tool
08/11/03W32.Blaster.Worm Removal Tool
08/08/03Backdoor.Winshell.50 Removal Tool
08/01/03W32.Mimail Removal Tool
06/27/03W32.Mumu.B.Worm Removal Tool
06/25/03W32.Sobig.E@mm Removal Tool
06/16/03W32.ExploreZip.Worm Removal Tool
06/06/03W32.Femot.Worm Removal Tool
06/05/03W32.Bugbear.B@mm Removal Tool
06/04/03Bat.Mumu.A.Worm Removal Tool
06/01/03W32.Sobig.C Removal Tool
05/18/03W32.Sobig.B Removal Tool
05/12/03W32.HLLW.Fizzer Removal Tool
04/14/03W32.HLLW.Nebiwo Removal Tool
02/24/03W32.HLLW.Lovgate Removal Tool
01/25/03W32.SQLExp.Worm Removal Tool
01/14/03W32.Sobig.A@mm Removal Tool
01/09/03W32.Lirva Removal Tool
11/25/02W32.HLLW.Winevar/W32.Funlove.4099 Removal Tool
11/15/02W32.Brid.A@mm/W32.Funlove.4099 Removal Tool
10/01/02W32.Bugbear@mm Removal Tool
09/30/02W32.Opaserv.Worm Removal Tool
08/01/02W32.Magistr Removal Tool
07/16/02W32.Frethem Removal Tool
07/03/02W32.Yaha Removal Tool
05/10/02Backdoor.Autoupder Removal Tool
04/18/02W32.Klez Removal Tool
04/15/02W2k.Stream Removal Tool
04/15/02Wscript.Kakworm Removal Tool
04/01/02W32.Gibe@mm Removal Tool
03/28/02W32.Mylife Removal Tool
12/04/01W32.Goner.A@mm Removal Tool
11/28/01W32.Badtrans.B@mm Removal Tool
10/30/01W32.Nimda.E@mm Removal Tool
09/19/01W32.Nimda.A@mm Removal Tool
08/09/01CodeRed Removal Tool
07/31/01VBS.Potok@mm Removal Tool
07/20/01W32.Sircam.Worm@mm Removal Tool
07/16/01VBS.Haptime Removal Tool
03/09/01DOS FunLove.4099 Fix Tool
02/20/01W32 HybrisF Fix Tool
01/11/01W95.CIH Removal Tool
01/06/01W95.HybrisF Fix Tool
12/22/00Fix W32.Funlove.4099 Tool (Cleanflc.exe)
12/22/00VBS.Stages.A Fix
12/22/00VBS.LoveLetter Fix
12/22/00PrettyPark.Worm Removal Tool
12/21/00Happy99.Worm Removal Tool
12/21/00W32.Navidad Fix
12/20/00W32.Kriz Removal Tool
12/20/00Kak.Worm.B Fix
12/20/00W32.HLLW.QAZ.A Fix
12/19/00BuddyList Removal Tool
12/15/00W95.MTX Fix Tool

Търсене