Virus removal tools are used separately from F-Secure Anti-Virus and provide cleaning of a specific infection. Fixing tools perform repair of a system damaged or modified by a specific malicious program. Most of the tools have additional readme files that should be studied before usage.
- AntiFun
The AntiFun tool is used to protect a system from Funlove infection coming over a network. The AntiFun tool will prevent the FunLove virus from creating the dropper executable to System directory. It will not prevent any other files on the system from being infected.
Download: ftp://ftp.f-secure.com/anti-virus/tools/antifun.zip
Readme: ftp://ftp.f-secure.com/anti-virus/tools/antifun.txt AntiSirc
The purpose of the tool is to help the removal of the Sircam worm. The removal process is rather complex and assumes deletion of multiple copies of the worm and modification of several registry keys.
Download: ftp://ftp.f-secure.com/anti-virus/tools/antisirc.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/antisirc.exe
Readme: ftp://ftp.f-secure.com/anti-virus/tools/antisirc.txtAudit
FSAV Audit is a tool for network administrators, for generating reports of F-Secure Anti-Virus deployment in network. The tool will generate a report file, showing for each computer whether FSAV is installed, and certain properties of installed FSAV, like the product's version, whether Gatekeeper is activated, and virus signature database dates.
Download: ftp://ftp.f-secure.com/anti-virus/tools/audit.zip
Readme: ftp://ftp.f-secure.com/anti-virus/tools/audit.htmBoo32
Boo32 is a simple boot sector read/write utility. Run it without parameters to get help on command line options.
Download: ftp://ftp.f-secure.com/anti-virus/tools/boo32.zipBT_B_Dis
The BT_B_Dis tool is used to unlock Badtrans.b worm file, so it could be deleted after system restart.
Download: ftp://ftp.f-secure.com/anti-virus/tools/bt_b_dis.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/bt_b_dis.zipCoolNote
CoolNote tool fixes the payload of CoolNot worm that disables Windows desktop.
Download: ftp://ftp.f-secure.com/anti-virus/tools/coolnote.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/coolnote.regF-Agobot
The F-Agobot utility disinfects computers infected with the certain Agobot backdoor variants. Please see the readme.txt file for more information. Alternatively you can use the F-Bot tool, that is mentioned below.
Download: http://www.f-secure.com/tools/f-agobot.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-agobot.zipThe unpacked version is available from here:
Download: http://www.f-secure.com/tools/f-agobot.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-agobot.exe
Readme: http://www.f-secure.com/tools/f-agobot.txt
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-agobot.txtF-Bagle
The F-Bagle utility disinfects computers infected with the certain Bagle worm variants. Please see the readme.txt file for more information.
Download: http://www.f-secure.com/tools/f-bagle.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-bagle.zipThe unpacked version is available from here:
Download: http://www.f-secure.com/tools/f-bagle.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-bagle.exe
Readme: http://www.f-secure.com/tools/f-bagle.txt
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-bagle.txtSystem administrators can download the JAR version from here:
Download: http://www.f-secure.com/tools/f-bagle.jar
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-bagle.jarF-Bot
The F-Bot utility disinfects computers infected with certain variants of Agobot, Wootbot, SdBot, RBot, SpyBot, ForBot, IRCBot. Please see the readme.txt file for more information.
Download: http://www.f-secure.com/tools/f-bot.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-bot.zipThe unpacked version is available from here:
Download: http://www.f-secure.com/tools/f-bot.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-bot.exe
Readme: http://www.f-secure.com/tools/f-bot.txt
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-bot.txtSystem administrators can download the JAR version from here:
Download: http://www.f-secure.com/tools/f-bot.jar
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-bot.jarF-Bugbr
The F-Bugbr utility disinfects computers infected with W32/Bugbear.A and 32/Bugbear.B (also known as Tanat or Tanatos) worms.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-bugbr.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-bugbr.exe
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-bugbr.txtF-Cabir
The F-Cabir utility disinfects Series 60 devices infected with Cabir worm variants SymbOS/Cabir.A to SymbOS/Cabir.Z and SymbOS/Mabir.A
Download: http://www.europe.f-secure.com/tools/f-cabir.sis
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-cabir.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-cabir.sis
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-cabir.txtF-CIH
The F-CIH tool is used to check if a computer is infected with CIH virus. The tool terminates CIH virus process. Then a system should be cleaned with F-Secure Anti-Virus.
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-cih.exeF-Codered
F-CodeRed is a special tool to detect and remove CodeRed.C and CodeRed.F worms from the infected computer's memory.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-codered.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-codered.exe
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-codered.txtF-Commwarrior
The F-Commwarrior utility deactivates following SymbOS/Commwarrior worm variants:
SymbOS/Commwarrior.A, SymbOS/Commwarrior.B, SymbOS/Commwarrior.C
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-commwarrior.zip
Download: http://www.f-secure.com/tools/f-commwarrior.sis
Download: ftp://ftp.f-secure.com/pub/anti-virus/tools/f-commwarrior.sis
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-commwarrior.txtF-Deborm
The F-Deborm utility disinfects computers infected with Deborm.R worm (also known as Worm.Win32.Deborm.R and W32/Deborm.R) and the malware that it drops to an infected system: Trojan.Win32.Killav.q, Backdoor.SDbot.gen (also known as W32/SDBot.J), Backdoor.Litmus.203 (also known as W32/Litmus.C).
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-deborm.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-deborm.exe
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-deborm.txtF-Fizzer
The F-Fizzer utility disinfects computers infected with Fizzer worm.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-fizzer.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-fizzer.exe
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-fizzer.txtF-Force
The F-Force utility disinfects computers infected with known variants of the following malware families: Agobot, Aimbot, Bagle, Bozori, Codbot, Dumaru, Fanbot, Forbot, IRCBot, Mitglieder, Mydoom, Mytob, Netsky, Padobot, Poebot, Rbot, SDBot, Spybot, Wootbot, Zafi. The tool requires the latest anti-virus updates (latest.zip file) to be downloaded from F-Secure's web or ftp sites. Please see the ReadMe.txt file in the download zip for more information.
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-force.zip
Download: http://www.f-secure.com/tools/f-force.zipF-Hare
F-HARE will detect and disinfect the three known variants of the Hare virus (also known as HDEuthanasia and Krsna).
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-hare15.zipF-IntCe
F-IntCe tool detects and disinfects the tricky INT_CE boot virus.
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-intce.zipF-Korgo
The F-Korgo utility disinfects computers infected with the certain Korgo worm variants. Please see the readme.txt file for more information.
Download: http://www.f-secure.com/tools/f-korgo.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-korgo.zipThe unpacked version is available from here:
Download: http://www.f-secure.com/tools/f-korgo.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-korgo.exe
Readme: http://www.f-secure.com/tools/f-korgo.txt
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-korgo.txtSystem administrators can download the JAR version from here:
Download: http://www.f-secure.com/tools/f-korgo.jar
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-korgo.jarF-Lgate or F-Lovgate
The F-Lgate utility disinfects computers infected with Lovgate.A, .B, .C, .D, .F, .G, .H, .I, .J, .K, and .L worm variants.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-lgate.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-lgate.exe
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-lgate.txtF-Locknut
The F-Locknut utility disinfects Series 60 devices infected with the Locknut.A trojan.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-locknut.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-locknut.sis
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-locknut.txtF-Look2Me
The F-Look2Me tool detects and deactivates Look2Me from Windows 2000/XP/2003 systems. Look2Me is adware that serves pop-up advertisements. It has a guardian implementation to prevent detection and removal. The tool also restores Debug Privileges to the Administrators group.
Download: http://www.f-secure.com/tools/f-look2me.zip
Download: http://www.f-secure.com/tools/f-look2me.exe
Readme: http://www.f-secure.com/tools/f-look2me.txtF-Lovsan
The F-Lovsan utility disinfects computers infected with W32/Lovsan.A, W32/Lovsan.B, W32/Lovsan.C worms and W32/Lovsan.E worms.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-lovsan.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-lovsan.exe
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-lovsan.jar
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-lovsan.txtF-Mem
F-MEM tool will detect the Memorial virus (also known as Clint).
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-mem10.zipF-Mydoom
The F-Mydoom utility disinfects computers infected with the certain Mydoom worm variants. Please see the readme.txt file for more information.
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-mydoom.zip
Download: http://www.f-secure.com/tools/f-mydoom.zipThe unpacked version is available from here:
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-mydoom.exe
Download: http://www.f-secure.com/tools/f-mydoom.exe
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-mydoom.txt
Readme: http://www.f-secure.com/tools/f-mydoom.txtSystem administrators can download the JAR version from here:
Download: http://www.f-secure.com/tools/f-mydoom.jar
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-lovsan.jarF-MydoomF
The F-MydoomF utility disinfects computers infected with the Mydoom.F worm variant. To disinfect other Mydoom variants please use the F-Mydoom utility mentioned above.
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-mydoomf.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-mydoomf.exe
Download: http://www.f-secure.com/tools/f-mydoomf.zipF-Netsky
The F-Netsky utility disinfects computers infected with the certain Netsky worm variants. Please see the readme.txt file for more information.
Download: http://www.f-secure.com/tools/f-netsky.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-netsky.zipThe unpacked version is available from here:
Download: http://www.f-secure.com/tools/f-netsky.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-netsky.exe
Readme: http://www.f-secure.com/tools/f-netsky.txt
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-netsky.txtSystem administrators can download the JAR version from here:
Download: http://www.f-secure.com/tools/f-netsky.jar
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-netsky.jarF-Opasrv
The F-Opasrv utility disinfects computers infected with all known Opaserv (also known as Opasoft or Scrup) worm variants.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-opasrv.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-opasrv.exe
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-opasrv.txtF-Roron
The F-Roron utility disinfects computers infected with certain Roron (also known as Roro and Oror) worm variants. Please see the readme.txt file for more information.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-roron.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-roron.exe
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-roron.txtF-Sasser
The F-Sasser utility disinfects computers infected with the certain Sasser worm variants. Please see the readme.txt file for more information.
Download: http://www.f-secure.com/tools/f-sasser.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-sasser.zipThe unpacked version is available from here:
Download: http://www.f-secure.com/tools/f-sasser.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-sasser.exe
Readme: http://www.f-secure.com/tools/f-sasser.txt
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-sasser.txtSystem administrators can download the JAR version from here:
Download: http://www.f-secure.com/tools/f-sasser.jar
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-sasser.jarF-SdBot
The F-SdBot utility disinfects computers infected with the certain SdBot backdoor variants. Please see the readme.txt file for more information. Alternatively you can use the F-Bot tool, that is mentioned above.
Download: http://www.f-secure.com/tools/f-sdbot.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-sdbot.zipThe unpacked version is available from here:
Download: http://www.f-secure.com/tools/f-sdbot.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-sdbot.exe
Readme: http://www.f-secure.com/tools/f-sdbot.txt
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-sdbot.txtSystem administrators can download the JAR version from here:
Download: http://www.f-secure.com/tools/f-sdbot.jar
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-sdbot.jarF-Shell
F-SHELL tool will detect and disinfect the Shell.10634 Windows virus (also known as Tentacle_II).
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-shell.zipF-Skulls
The F-Skulls utility disinfects Series 60 devices infected with the following Skulls trojan variants: SymbOS/Skulls.A, SymbOS/Skulls.B, SymbOS/Skulls.C and SymbOS/Skulls.d
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-skulls.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-skulls.sis
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-skulls.txtF-Slammer
F-Slammer is a special tool for detection of W32/Slammer worm in the computer's memory.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-slammer.zip
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-slammer.txtF-Sobig
The F-Sobig utility disinfects computers infected with W32/Sobig.B@mm, W32/Sobig.C@mm, W32/Sobig.E@mm and W32/Sobig.F@mm worm variants. These worms are also known as 'Palyh' and 'Mankx'.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-sobig.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-sobig.exe
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-sobig.jar
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-sobig.txtF-Span
F-SPAN tool will detect and disinfect the Spanska.4250 virus also known as Elvira).
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-span13.zipF-Spyaxe
F-Spyaxe is a tool to deactivate the SpyAxe/SpywareStrike installer trojan. The trojan shows a security warning message from the system tray and repetitively installs SpyAxe or SpywareStrike.
Download: http://www.f-secure.com/tools/f-spyaxe.zip
Download: http://www.f-secure.com/tools/f-spyaxe.reg
Readme: http://www.f-secure.com/tools/f-spyaxe.txtF-Tent
F-TENT tool will detect and disinfect the Tentacle.1958 Windows virus.
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-tent10.zipF-Trickl
F-TRICKL tool will detect and disinfect the Tentatrickle virus.
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-trickl.zipF-Vice
F-Vice tool will detect and disinfect the polymorphic Vice virus.
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-vice14.zipF-Vmonde
F-Vmonde tool detects and deactivates Virtumonde from Windows XP/2003 systems. Virtumonde is adware that serves pop-up advertisements. It uses special techniques to avoid removal, which are circumvented with this tool.
Download: http://www.f-secure.com/tools/f-vmonde.zip
Download: http://www.f-secure.com/tools/f-vmonde.exe
Readme: http://www.f-secure.com/tools/f-vmonde.txtF-Warpigs
The F-Warpigs utility disinfects computers infected with W32/Warpigs.B worm.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-warpigs.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-warpigs.exe
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-warpigs.txtF-Welchi
The F-Welchi utility disinfects computers infected with the Welchi (also known as Nachi) worm.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-welchi.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-welchi.exe
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/f-welchi.txtF-Zafi
The F-Zafi utility disinfects computers infected with Zafi (also known as Erkez or Kapes) and Zafi.B worm variants.
Download: http://www.f-secure.com/tools/f-zafi.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-zafi.zipThe unpacked version is available from here:
Download: http://www.f-secure.com/tools/f-zafi.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-zafi.exe
Readme: http://www.f-secure.com/tools/f-zafi.txt
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-zafi.txtSystem administrators can download the JAR version from here:
Download: http://www.f-secure.com/tools/f-zafi.jar
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-zafi.jarFix-Aula
Fix-Aula is a tool to repair a system configuration damaged by Aula trojan.
Download: ftp://ftp.f-secure.com/anti-virus/tools/fix_aula.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/fix_aula.zipFixBoot
FixBoot is a small utility that overwrites a boot sector of a diskette with a standard boot code thus elimitating any diskette boot sector infection.
Download: ftp://ftp.f-secure.com/anti-virus/tools/fixboot.zipFixPe and FixPe2
FixPe and FixPe2 utilities allow to fix false alarms of F-Prot engine on certain files that have inaccurate section information resulted from virus infection or inaccurate compression.
Download: ftp://ftp.f-secure.com/anti-virus/tools/fixpe.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/fixpe2.zipFsKlez or F-Klez
F-Klez is a utility that disinfects a computer infected with Klez worm and Elkern virus that the worm drops.To remove Klez.E, Klez.F and Klez.H worms please use the KlezTool utility, listed below.
Download: ftp://ftp.f-secure.com/anti-virus/tools/fsklez.exe
Readme: ftp://ftp.f-secure.com/anti-virus/tools/fsklez.txtFsNimda or F-Nimda
F-Nimda is a utility that disinfects a computer infected with Nimda virus-worm and eliminates security holes that Nimda creates in a system.
Download: ftp://ftp.f-secure.com/anti-virus/tools/fsnimda3.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/fsnimda3.jar
Readme: ftp://ftp.f-secure.com/anti-virus/tools/fsnimda3.txtNote: If you have problems running the above mentioned FsNimda tool, you can download a different version from here:
Download: ftp://ftp.f-secure.com/anti-virus/tools/fsnimda.exe
Readme: ftp://ftp.f-secure.com/anti-virus/tools/fsnimda.txtGetMac
GetMac tool is used to separately update FSMacro.def definition file. Note that FsMacro.def definition file is now included into all update packages available from F-Secure.
Download: ftp://ftp.f-secure.com/anti-virus/tools/getmac11.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/getmac12.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/getmac13.zipGetBoot
Getboot is a number of utilities to copy the contents of boot sectors to a file. The getboot.bat is a batch file to save a floppy boot sector to a file, the gethboot.bat is a batch file to save a hard drive boot sector to a file and the getmbr.bat is batch file to save a hard drive MBR to a file.
Download: ftp://ftp.f-secure.com/anti-virus/tools/bat/getboot.bat
Download: ftp://ftp.f-secure.com/anti-virus/tools/bat/gethboot.bat
Download: ftp://ftp.f-secure.com/anti-virus/tools/bat/getmbr.bat
Readme: ftp://ftp.f-secure.com/anti-virus/tools/bat/readme.txtGetMBR and PutMBR
GetMBR and PutMBR are small utilities to take a sample of an infected machines main boot record. Get_mbr copies the mbr to a file mbr.dat and put_mbr copies the file to the mbr area.
Download: ftp://ftp.f-secure.com/anti-virus/tools/getmbr.zipGokarDis
The GokarDis tool disables Gokar worm autostart key. Download and run this REG file, restart your system and delete KAREN.EXE file in your Windows directory either manually or with F-Secure Anti-Virus.
Download: ftp://ftp.f-secure.com/anti-virus/tools/gokardis.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/gokardis.zipKirayDis
KirayDis is a tool to disinfect Kiray worm and to undo changes it does to system configuration.
Download: ftp://ftp.f-secure.com/anti-virus/tools/kiraydis.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/kiraydis.zipKlezTool
The Kleztool is the utility to eliminate several variants of Klez virus-worm infection and to disinfect files infected by Klez. The utility should be used together with F-Secure Anti-Virus as this tool doesn't disinfect Elkern.A and Elkern.B virus variants, that Klez.E and Klez.F worms drop. However the utility is able to disinfect files infected with Elkern.C virus that Klez.H worm drops.
Download: ftp://ftp.f-secure.com/anti-virus/tools/kleztool.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/kleztool.com
Readme: ftp://ftp.f-secure.com/anti-virus/tools/kleztool.txtLirvTool
The LirvTool is the utility to eliminate Lirva (or also known as Avril or Avron) worm infection and to restore files and System Registry entries modified by the worm.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/lirvtool.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/lirvtool.com
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/lirvtool.txtMagb_Dis or Disinf
Magb_Dis tool is used to 'help' APV engine in F-Secure Anti-Virus to disinfect large files encrypted by Magistr.b virus-worm. The Disinf.exe utility creates DISINF.INI file that contains computer name and it is used by AVP engine to disinfect files encrypted by Magistr.b.
Download: ftp://ftp.f-secure.com/anti-virus/tools/magb_dis.zip
Readme: ftp://ftp.f-secure.com/anti-virus/tools/magb_dis.txtMagoldFix
The Magold.e registry fix is used to fix Registry entries modified and created by Magold.E worm. After disinfection of Magold.E worm by FSAV 5.40 or later version (or after manual disinfection) , please download and run the MAGOLD_FIX.REG file.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/magold_fix.regMatrix_D
Matrix_D is a tool that fixes a payload of Matrix virus that doesn's allow to restart a system after infection.
Download: ftp://ftp.f-secure.com/anti-virus/tools/matrix_d.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/matrix_d.zipMTXDisin
MTXDisin tool removes autostarting key of MTX virus-worm dropper and after system restart the worm's dropper file will not be locked and could be deleted.
Download: ftp://ftp.f-secure.com/anti-virus/tools/mtxdisin.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/mtxdisin.zipMultiCom
MultiComm is a utility for enabling multiple communication directories to be used with F-PROT for Windows (FPW).
Download: ftp://ftp.f-secure.com/anti-virus/tools/multicom.zipNavidDis
NavidDis is a tool to remove autostarting key of Navidad worm and to fix EXE file startup key in the Registry.
Download: ftp://ftp.f-secure.com/anti-virus/tools/naviddis.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/naviddis.zipOpasTool
The OpasTool is the utility to eliminate several different variants of Opaserv (or also known as Opasoft) worm infection and to restore files and System Registry entries modified by the worm.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/opastool.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/opastool.com
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/opastool.txtPPDisinf
PPDisinf is a tool to disinfect PrettyPark worm and to fix EXE file startup key in the Registry.
Download: ftp://ftp.f-secure.com/anti-virus/tools/ppdisinf.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/ppdisinf.zipQazDisin
QazDisin is a tool to remove QAZ work autostarting key from the Registry. This way the worm will be disinfected.
Download: ftp://ftp.f-secure.com/anti-virus/tools/qazdisin.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/qazdisin.zipS7Disinf
S7Disinf is a tool to remove Sub7 backdoor's autolauncher from EXE file startup key. The autolauncher is used to run SubSeven backdoor every time an EXE file starts. The backdoor itself is to be removed with F-Secure Anti-Virus.
Download: ftp://ftp.f-secure.com/anti-virus/tools/s7disinf.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/s7disinf.zipShellFix
The ShellFix tool is used to fix Explorer startup problems resulted from unconditional termination of F-Nimda tool during its operation. If F-Nimda tool is terminated by a user or operating system while it is scanning a hard disk, there will be no icons and no taskbar on Windows desktop. To fix the problem you will have to run the SHELLFIX.REG file.
Download: ftp://ftp.f-secure.com/anti-virus/tools/shellfix.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/shellfix.zip
Readme: ftp://ftp.f-secure.com/anti-virus/tools/shellfix.txtSirc_Dis
Sirc_Dis utility is used to remove autostarting key of Sircam worm and to fix EXE file startup key in the Registry.
Download: ftp://ftp.f-secure.com/anti-virus/tools/sirc_dis.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/sirc_dis.zipStagesW9x
StagesW9x is a tool is used to remove Stages worm autostartup key from the Registry and to undo other Registry changes done by the worm.
Download: ftp://ftp.f-secure.com/anti-virus/tools/stagesw9x.reg
Download: ftp://ftp.f-secure.com/anti-virus/tools/stagesw9x.zipSwenTool
The SwenTool is the utility to eliminate Swen (or also known as Gibe.E) worm infection and to restore System Registry entries modified by the worm.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/swentool.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/swentool.com
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/swentool.txtYahaFix
If after disinfection of certain Yaha worm variants by FSAV 5.40 or later version (or after manual disinfection) you can't start any EXE files, please download and run the YAHA_FIX.REG file.
Download: ftp://ftp.f-secure.com/anti-virus/tools/yaha_fix.reg
Readme: ftp://ftp.f-secure.com/anti-virus/tools/yaha_fix.txtYahaTool
The YahaTool is the utility created by Kaspersky Labs to eliminate Yaha.E (or also known as Lentin.G) worm infection and to restore files and System Registry entries modified by the worm.
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/yahatool.zip
Download: ftp://ftp.europe.f-secure.com/anti-virus/tools/yahatool.com
Readme: ftp://ftp.europe.f-secure.com/anti-virus/tools/yahatool.txt
No comments:
Post a Comment