Microsoft Worm Cleanser Goes Rootkit Hunting

[ronjor]

-{ Quote: "Microsoft's worm-cleansing tool has been updated to detect and remove Hacker Defender, a notorious rootkit program used by malicious virus writers." }- Story (http://www.eweek.com/article2/0,1759,1785621,00.asp?kc=EWRSS03119TX1K0000594)

[JerryM]

How does one get the MS program?

Jerry

[Primrose]

-{ Quote: "How does one get the MS program?

Jerry" }-

Here

http://www.microsoft.com/security/malwareremove/default.mspx

and here are some other tools they have.


Microsoft® Windows® Malicious Software Removal Tool (KB890830)
This tool checks your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove the infection if it is found. Microsoft will release an updated version of this tool on the second Tuesday of each month.


http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&DisplayLang=en


The Microsoft Windows Malicious Software Removal Tool helps remove specific, prevalent malicious software from computers that are running Windows Server 2003, Windows XP, or Windows 2000


Malicious software family Tool version Current Severity Rating
Win32/Berbew January 2005 (V 1.0) Low
Win32/Doomjuice January 2005 (V 1.0) Low
Win32/Gaobot January 2005 (V 1.0) Moderate
Win32/MSBlast January 2005 (V 1.0) Moderate
Win32/Mydoom January 2005 (V 1.0) Moderate
Win32/Nachi January 2005 (V 1.0) Low
Win32/Sasser January 2005 (V 1.0) Moderate
Win32/Zindos January 2005 (V 1.0) Low
Win32/Korgo February 2005 (V 1.1) Moderate
Win32/Netsky February 2005 (V 1.1) Moderate
Win32/Randex February 2005 (V 1.1) Low
Win32/Zafi February 2005 (V 1.1) Moderate
Win32/Bagle** March 2005 (V 1.2) Moderate
Win32/Bropia March 2005 (V 1.2) Low
Win32/Goweh March 2005 (V 1.2) Low
Win32/Sober March 2005 (V 1.2) Moderate
Win32/Sobig March 2005 (V 1.2) Low
Win32/Hackdef*** April 2005 (V 1.3) Moderate
Win32/Mimail April 2005 (V 1.3) Moderate
Win32/Rbot April 2005 (V 1.3) Moderate


http://support.microsoft.com/?kbid=890830

[ch0pper]

yes

does not work with hacker defender gold!!!

just to let you know!!!!


ch0pper


hacker defender team

[scott lang]

but these links are to the msrt and not the worm cleaner. is it the same thing?

[ronjor]

Same thing.

[JerryM]

Thanks,
Jerry