Malware Removal Tools - Downloads
Welcome, Guest. Please login or register. Did you miss your activation email?
Pages: [1]
  Print  
Author Topic: Malware Removal Tools - Downloads  (Read 2238 times)
Britec
Administrator
Hero Member
*****
Posts: 3346



View Profile
« on: October 27, 2009, 03:41:23 AM »

Malware Removal Tools - Downloads

Anti-malware programs will be added here for you to download.

PLEASE USE THESE TOOLS IF AND WHEN REQUIRED AND ADVISED BY AN EXPERT BY USING THESE TOOLS, YOU AGREE TO USE THESE TOOLS AT YOUR OWN RISK, BRITEC WILL NOT BE HELD RESPONSIBLE FOR ANYTHING

This is the place where you can find special security tools made for particular malware.
Each of these tools is frequently updated and we will make sure that the versions here are up to date. If you find any problems or broken links, please contact a member of the administration team.


1. Trend Micro HijackThis- Please Do NOT use this software on your own. Get advice from an expert. Powerful Removal Tool by Trend Micro.

2. Start Up List vb2.0 - The list contains information about start up entries that can be helpful for analysing.

3. Combofix - comboFix is a program, created by sUBs, that scans your computer for known malware, and when found, attempts to clean these infections automatically. In addition to being able to remove a large amount of the most common and current malware, ComboFix also displays a report that can be used by trained helpers to remove malware that is not automatically removed by the program.

4. SmitFraud - SmitFraud has become a term to mean an infection where fake security alerts appear in your taskbar stating that you are infected. These alerts tend to be accompanied by a rogue anti-spyware program installed on your computer without your consent. Clicking on one of these fake security alerts will either bring you to a home page where you can purchase other fraudulent software or will install automatically, without your permission, one of these software.

5. Malwarebytes - Malwarebytes is a site dedicated to fighting malware. Malwarebytes has developed a variety of tools that can identify and remove malicious software from your computer. When your computer becomes infected, Malwarebytes can provide the needed assistance to remove the infection and restore the machine back to optimum performance.

6. Peper Fix - The tool for fixing Peper trojan, made by O^E.

7. LSP Fix - This program attempts to correct Internet connection problems resulting from buggy or improperly-removed Layered Service Provider (LSP) software. When you start LSP-Fix, it will read the list of LSP modules from the Windows registry and verify that each module is present. If a module is missing, the LSP data will be placed on the "Remove" list for removal.

8. About Buster - Use this tool to negate the latest CWS variant "res://”
 
9. KillBox -KillBox is updated and is now Pocket KillBox. New features and easier to use. Powerful tool, so use only when being told and required.

10. WinSockFix A tool to fix Winsock problems, internet connection problems which can at times caused by spywares

11. SUPERAntiSpyware - SUPERAntiSpyware Professional features our highly advanced Real-Time Protection to ensure protection from installation or re-installation of potential threats as you surf the Internet. Used in conjunction with our First Chance Prevention and  Registry Protection, your computer is protected from thousands of threats that attempt to infect and infiltrate your system at startup or while shutting down your system.

12. VundoFix - The Vundo family of Trojans is one of the most common infections we find on user's computers. This infection can cause popups that include advertisements for rogue anti-spyware programs. Some common rogue antispyware programs that are advertised include WinFixer, SysProtect and WinAntiSpyware. Users are normally targeted by false positives, fake alerts, and warning of infections on their computer.

13. ATF Cleaner - ATF Cleaner is a free stand-alone utility that cleans up any temporary files that a computer may collect. This includes the Windows temp folder, Current User temp folder, All users temp folder, cookies, Temporary Internet Files, History, Prefetch, Java Cache & Recycle Bin.

14. Single Click System Restore Point - Easy "one click" to set a system restore point BEFORE you install a program, or do any kind of system maintenance

15. RootRepeal - is currently in public beta.  Whereas every effort has been made to ensure compatibility with every system configuration on Windows 2000, XP, 2003 and Vista, it cannot be guaranteed.  There is always some risk when scanning for rootkits.  Before running RootRepeal, please make sure you have backups of all important data and have saved all open documents.

16. Registry Backup. ERUNT - When the Windows registry gets corrupted, it can mess up your entire system. Emergency Recovery Utility NT--but you can call it ERUNT--lets you back up your registry. With ERUNT's restore folders, you can restore your NT-based system to its full glory. And if your PC's sorry state has reduced you to a mess, too, don't worry; ERUNT doesn't have any complicated settings. You can set ERUNT to automatically backup and restore the folders, too.

17. FreeFixer - Download FreeFixer . FreeFixer is freeware and Windows 2000/XP/2003/20008/Vista/7 RC1 compatible. 64-bit Windows is not supported yet. FreeFixer is a general purpose removal tool which will help you to delete potentially unwanted software, such as adware, spyware, trojans, viruses and worms. FreeFixer works by scanning a large number of locations where unwanted software has a known record of appearing or leaving traces. The scan locations include the programs that run on your computer, the programs that starts when you reboot your computer, your browser's plug-ins, your home page setting, etc.

18. Revo Uninstaller helps you to uninstall software and remove unwanted programs installed on your computer even if you have problems uninstalling and cannot uninstall them from "Windows Add or Remove Programs" control panel applet. Revo Uninstaller is a much faster and more powerful alternative to "Windows Add or Remove Programs" applet! It has very powerful features to uninstall and remove programs.

19. HostsXpert is an ultra-groovy Hosts file Manager, Editor and Helper-outter. Below you'll find a list of HostsXpert's functions. Just a Simple word of caution - Hosts files are not to be taken lightly

20. TDSSKILLER  - A rootkit is a program or a set of programs designed to obscure the fact that a system has been compromised.

For Windows operating systems, the term rootkit stands for a program that infiltrates the system and hooks system functions (Windows API). By hooking and modifying low-level API functions, such malware can effectively hide its presence in a system. Moreover, rootkits as a rule are able to conceal in the system any processes, folders and files on a disk as well as registry keys described in its configuration. Many rootkits install own drivers and services (hidden as well) into the system.

It is possible to disinfect a system infected with malware family Rootkit.Win32.TDSS using the utility TDSSKiller.exe.
The utility has GUI.

21. RKILL -  Rkill is a small, freeware and portable tool designed to terminate active malware processes allowing you to use other removal tools. Rkill is made by a Microsoft MVP “Lawrence Abrams” and is available in 4 different extensions. An .EXE, .COM, .SCR and a .PIF file.
The reason why Rkill comes in 4 different versions is because some malware will block .EXE files in an attempt to prevent you from running other malware removal tools, so this gets around that problem.

22. Emsisoft Emergency Kit - The Emsisoft Emergency Kit contains a collection of programs that can be used without a software installation to scan and clean infected computers for malware.
« Last Edit: August 10, 2010, 09:39:06 AM by Britec » Logged



db
Newbie
*
Posts: 1


View Profile
« Reply #1 on: April 14, 2010, 04:52:24 AM »

Can someone please direct me as to what to do first: Computer Vista sp1 - severely infected - Computer belongs to a friend (cried) I just said i would try to help, I have three computers and access to internet.  I think the os needs to be reinstalled. I don't even know how to do that.  What i have done: downloaded vista recovery cd and when attempting to restore it said there were no restore points. Now i can get it to boot up but can't log in....i down loaded avg rescue cd....and trinity software...I updated the software & run the scan but what should i  do with all the files that are infected??? rename?Huh? delete?Huh? skip?Huh?  Is there a simple way to just restore the os? It doesn't matter about the personal files being deleted. Just needs the computer for school. It has been non functional for a month or so.  Any advice?Huh?Huh?   please
Logged
Britec
Administrator
Hero Member
*****
Posts: 3346



View Profile
« Reply #2 on: April 14, 2010, 10:23:00 AM »

Try following this guide (link below)

http://www.briteccomputers.co.uk/forum/virustrojanspywaremalware/preparation-virus-spyware-and-trojan-removal/
Logged



tf76
Full Member
***
Posts: 124



View Profile WWW
« Reply #3 on: June 18, 2010, 08:10:40 AM »

Never knew about free fixer will have to test it out.

Regards,
Another PC Technician




Logged

tf76
Full Member
***
Posts: 124



View Profile WWW
« Reply #4 on: August 06, 2010, 06:26:30 AM »

TDSSKILLER        http://support.kaspersky.com/viruses/solutions?qid=208280684

A rootkit is a program or a set of programs designed to obscure the fact that a system has been compromised.

For Windows operating systems, the term rootkit stands for a program that infiltrates the system and hooks system functions (Windows API). By hooking and modifying low-level API functions, such malware can effectively hide its presence in a system. Moreover, rootkits as a rule are able to conceal in the system any processes, folders and files on a disk as well as registry keys described in its configuration. Many rootkits install own drivers and services (hidden as well) into the system.

It is possible to disinfect a system infected with malware family Rootkit.Win32.TDSS using the utility TDSSKiller.exe.
The utility has GUI.

I would also add

RKILL      http://www.bleepingcomputer.com/forums/topic308364.html

Rkill is a small, freeware and portable tool designed to terminate active malware processes allowing you to use other removal tools. Rkill is made by a Microsoft MVP “Lawrence Abrams” and is available in 4 different extensions. An .EXE, .COM, .SCR and a .PIF file.
The reason why Rkill comes in 4 different versions is because some malware will block .EXE files in an attempt to prevent you from running other malware removal tools, so this gets around that problem.

Cheers,
Another PC Technician

« Last Edit: August 06, 2010, 06:37:39 AM by tf76 » Logged

Britec
Administrator
Hero Member
*****
Posts: 3346



View Profile
« Reply #5 on: August 06, 2010, 08:07:06 AM »

tf76 thanks added them to the list
Logged



tf76
Full Member
***
Posts: 124



View Profile WWW
« Reply #6 on: August 10, 2010, 09:18:04 AM »

Found another one mate

Emisoft Emergency Kit
http://www.emsisoft.com/en/software/eek/

Looks good. Maybe you can give it a test?

How it works:
The Emsisoft Emergency Kit contains a collection of programs that can be used without a software installation to scan and clean infected computers for malware.
Emsisoft Emergency Kit Scanner

With the Emsisoft Emergency Kit Scanner you have got the powerful Emsisoft Scanner including graphical user interface. Search the infected PC for Viruses, Trojans, Spyware, Adware, Worms, Dialers, Keyloggers and other malign programs.
Run the Emsisoft Emergency Kit Scanner with a double click on a2emergencykit.exe. Found Malware can be moved to quarantine or finally deleted.
Emsisoft Commandline Scanner

This scanner contains the same functionality as the Emergency Kit Scanner but without a graphical user interface. The commandline tool is made for professional users and can be used perfectly for batch jobs.
To run the Emsisoft Commandline Scanner, do the following actions:
- Open a command prompt window (Run: cmd.exe)
- Switch to the drive of the USB Stick (e.g.: f:) and then to the folder of the executable files (e.g.: cd run)
- Run the scanner by typing: a2cmd.exe
Next you will see a help page describing all available parameters.
Next is an example to scan drive c:\ with enabled Memory, Traces (Registry) and Cookie scan with active Heuristic module and archive support. Found Malware is moved to quarantine.
a2cmd.exe /f="c:\" /m /t /c /h /a /q="c:\quarantine\"
Emsisoft HiJackFree

HiJackFree helps advanced users to detect and remove Malware manually. With HiJackFree you can manage all active processes, services, drivers, autoruns, open ports, hosts file entries and many more. For your full control over your system.
Emsisoft BlitzBlank

BlitzBlank is a tool for experienced users and all those who must deal with Malware on a daily basis. Malware infections are not always easy to clean up. These days the software pests use clever techniques to protect themselves from being deleted. In more and more cases it is almost impossible to delete a Malware file while Windows is running. BlitzBlank deletes files, Registry entries and drivers at boot time before Windows and all other programs are loaded.

Self made Emergency USB stick
Expand the content of the Emsisoft Emergency Kit to an USB stick and make your own universal tool to scan and clean infected PCs.

Regards,
Another PC Technician
« Last Edit: August 10, 2010, 07:14:22 PM by tf76 » Logged

Britec
Administrator
Hero Member
*****
Posts: 3346



View Profile
« Reply #7 on: August 10, 2010, 09:41:09 AM »

if its anything like A-squared then it will be good.
Logged



tf76
Full Member
***
Posts: 124



View Profile WWW
« Reply #8 on: August 10, 2010, 07:22:48 PM »

Not sure if this has been mentioned before but you can load file definitions into Malwarebytes Antimalware while offline.

So if you can't get onto the internet you can just download the latest definition files from a working internet connection save the rules.ref file onto a USB, Install Malwarebytes onto infected PC, then stick in USB and copy the latest rules.ref file and now you have the program updated with the latest file definitions.

Very handy. I used to do this with SPYBOT back in the day.

How to do it:

Navigate to the following locations to retrieve the rules.ref file to update its virus definitions.

For Windows XP you want to go to:
C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware

For Vista and Windows 7 go to:
C:/ProgramData/Malwarebytes/Malwarebytes Anti-Malware

Make a copy of the rules.ref file to portable storage device.
Transfer this file to the infected computer.

Regards,
Another PC Technician
Logged

Britec
Administrator
Hero Member
*****
Posts: 3346



View Profile
« Reply #9 on: August 11, 2010, 03:16:22 AM »

Cheers for the heads up I keep that in mind.
Logged



Pages: [1]
  Print  
 
Jump to: