Showing posts with label worm. Show all posts
Showing posts with label worm. Show all posts

Monday, December 12, 2016

Virus Trojan and Worm Removal as of 2014

Virus Trojan and Worm Removal as of 2014


This is a list of  Virus Removal Tool as of January  2014. Just select what type of removal you want. Depending the problem of virus infection you have to select the best antivirus brand of your Windows XP, Windows 7, Windows 8 or Windows Vista Computer system.

The removal procedure of infected system are different since these are different antivirus maker company. Be sure to follow the guide located in their respected websitesClick the link associated with the antivirus software currently installed on your system and follow the prompts or instructions on the website.

List Of Antivirus Program and Their Removal Tools


Avast 
http://files.avast.com/files/eng/aswclear.exe

AVG 
http://www.avg.com/us-en/utilities

Avira
http://www.avira.com/en/support-for-free-knowledgebase-detail/kbid/88

BitDefender
http://kb.bitdefender.com/site/article/333/

CA Antivirus
http://homeofficekb.ca.com/CIDocument.asp?KDId=3125&Preview=0&Return=0&GUID=DF325E0AA0AB4264AF47E4BEA49F571B

Comodo Internet Security

https://support.comodo.com/index.phpm=knowledgebase&_a=viewarticle&kbarticeid=298

Cyber Defender Early Detection Center
http://cyberdefender.custhelp.com/app/answers/detail/a_id/207

eScan
http://www.microworldsystems.com/download/tools/esremove.exe

ESET
http://kb.eset.com/esetkb/index?page=content&id=SOLN2788

FRISK F-PROT Antivirus for Windows
http://www.f-prot.com/support/windows/fpwin_faq/25.html

F-Secure
http://www.f-secure.com/en/web/home_global/support/article/kba/2109/k/uninstall+f+secure/p/1

Kaspersky
http://support.kaspersky.com/kis2010/service?qid=208279463

LavaSoft
http://www.lavasoftsupport.com/index.php?showtopic=28

McAfee
http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe

Norman Virus Control/Norman Security Suite

http://www.norman.com/support/support_issue_archive/67798/en

Norton (Symantec )

ftp://symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe

Norton Security Scan
ftp://symantec.com/public/english_us_canada/removal_tools/NSSRT.exe

Panda

http://www.pandasecurity.com/resources/sop/UNINSTALLER_08.exe

Panda Cloud Internet Protection
http://www.pandasecurity.com/resources/sop/Cloud_AV_Uninstaller.exe

Pareto Logic
http://techsupport.paretologic.com/plsupport/consumer/kbdetail.asp?kbid=555

Sophos
http://www.sophos.com/support/knowledgebase/article/11019.html

Trend Micro
http://esupport.trendmicro.com/1/How-do-I-remove-old-or-new-versions-of-Trend-Micro-products-in-my-comp.aspx

Trend Micro Titanium
http://esupport.trendmicro.com/solution/en-us/1056455.aspx

Trend Micro Worry-Free Business Security Agent
http://esupport.trendmicro.com/solution/en-us/1057237.aspx

Windows Live OneCare
http://download.microsoft.com/download/4/c/b/4cb845e7-1076-437b-852a-7842a8ab13c8/OneCareCleanUp.exe

Windows Security Essentials
http://support.microsoft.com/kb/2435760

Zone Alarm
http://download.zonealarm.com/bin/free/support/download/clean.exe

Some antivirus removal requires you to reboot your Windows XP or Windows 7 system and start to safe mode. Also prepare for at least 512 Mb external storage device because some removal tools requires you to copy the program into your usb disk and run it as  USB Bootable device.


Available link for download

Read more »

Wednesday, November 9, 2016

Win32 Sality Worm Virus Complete Removal Instruction

Win32 Sality Worm Virus Complete Removal Instruction


When the Worm Win32 Sality strike into my computer, it causes me headache. All uncompressed  executable file I have save to my computer were all infected and cant used anymore. But the real problem wasnt stop there, all the computer connected in the network were also infected.

At that time of infection, there are limited updates and removal tool available in the web and most of the tools were only  good for prevention (not those computer already infected).The thing I did at that time was isolate the infected computer in the network ad backup all important files (win32 sality was not include at backup). Then I  Format and reprogram the computer; install and update antivirus definitions.


This solution comes into my mind  because its the fastest way to remove the win32 sality worm rather than removing entries in Windows Registry.

So what is Win32 Sality?


A Win32 Sality worn  is a family of polymorphic file infectors that target Windows executable files with win32/salityextensions .SCR or .EXE. They may execute a damaging payload that deletes files with for executable files and will attach its code previously processed. It will also infects computer connected to the network rapidly. It also infect the system such as telnet.exe, write.exe, regedt32.exe, cmd.exe, notepad.exe files and run in memory processes making it complicated to remove.

Causes

  • Installed via links in undesirable e-mail attachments

  • Infected Removable device inserted into good computer

  • Network computer is infected

The Symptoms

  • Blue screen when trying to enter in Safe Mode

  • When opening  executable files infected NSIS error appear

  • Removable disk drives contains Autorun.inf which have random strings and shell commands lines pointing to a file in same folder

  • For example the executable files of the installer is 20 Mb, It will be reduce or modified to around 160 Kbytes

Removal Instruction

  • Always Update the Virus Definitions

  • Run Win32 Sality Removal Tools
Removal instruction (with  extra caution)
Registry Editing:
  • Go to Start Menu

  • Click Run (Windows XP) Search (Windows Vista and Windows 7)

  • Type Regedit

  • Press Enter

  • Then locate and delete these registry entries.

Delete the  following registry key
  • amsint32 located at
    HKEY_LOCAL_MACHINESYSTEMControlSet001Services

  • amsint32 located at
    HKEY_LOCAL_MACHINESYSTEMControlSet002Services

  • amsint32 located at
    HKEY_LOCAL_MACHINESYSTEMControlSet003Services

  • Qurdk located at
    HKEY_CURRENT_USERSoftware

Note: Before removing the registry entries, you must have first update your antivirus or run a complete scan using the removal tools
Clik here to download removal tools

Available link for download

Read more »