Mini Fix/Removal Tools request

[Bethrezen]

hi all

in my on going work to try and compile one of the most comprehensive newb friendly help guide I can I'm now compiling a list of all the different mini removal/fix tools that have been made to fix and clean specific problems which once I'm done will be getting adding to my guide

Any how here is what I have so far is there any that are missing ?? I know I still need to add stuff like descriptions but this is only the second draft and that will get sorted out later once I'm sure I have all the different tools that are available

now for Worm/Virus/Trojan Removal I'm pretty sure that between all of thoughts links everything should be covered so there's no need to add anymore to that unless there is a Worm, Virus or Trojan that not covered by one of thoughts links

however for the adware/spyware removal and fixes sections I'm sure there are plenty more that need to be added

so if anyone knows of any that are missing please let me know so i can add it to the list


Worm/Virus/Trojan Removal

BitDefender Removal Tools
Symantec Removal Tools
Kaspersky Labs Removal Tools
Bitdefender Removal Tools
Norman Antivirus Removal Tools
F-Secure Removal Tools
AVG Removal Tools
ETrust Removal Tools
McAfee AVERT Tools

Microsoft Removal Tools

Malicious Software Removal Tool
Blaster Worm Removal Tool
Mydoom, Zindos, and Doomjuice Worm Removal Tool
Sasser (A to F) Worm Removal Tool
Code Red II Cleaner

Panda & Avast! Removal Tools

Panda Quick Remover
Avast! Virus Cleaner Tool

Adware/Spyware Removal

KazaaBegone
Kill2Me
Adware T.V. Media Removal Tool
AboutBuster
Home Search Hijacker
EliteToolbar Remover
Cool Web Shredder
CoolWWWSearch.SmartKiller
RapidBlaster Killer
Kazaa Spyware Removal

Plug-ins

The VX2 Cleaner Plug-in for Adaware

Fixes

BugOff
Windows Media Player Scripting Fix
HTA Stop
DSO Stop2
Anti-Polymorphism Patch
Saved Passwords Lock Patch
Shoot The Messenger
UnPlug n' Pray
DCOMbobulator
XPdite
FIX-CIH Virus Recovery
IE Fix

Do you mean "many".....or are compiling a list of really tiny applications?

[bigbuck]

KB890830 ?

[Infinity]

http://www.majorgeeks.com/downloads29.html

Beth, you will find a lot of goodies here at Majorgeeks and I will try to locate all the rest. ttyl

[Infinity]

http://www.spychecker.com/software/avspecial.html

some others

[Infinity]

http://virusall.com/downrem.html
http://www.swdtech.za.net/Stuff/VirusTools/VTools.htm


maybe a free av would come in handy?

just kiddin'

[Infinity]

Bethrezen, just a small note: too much information is terrifying for newbies, even for experienced users. I suggest you make it as interesting as possible. use highlights / colors, underline and use tabs, give personal humourous comments, whatever to break the monotone tone if you know what I mean. avoid that. your first part is very good. very informative.

Inf.

[Bethrezen]

hi opt

i know what you mean about braking it up a lil bit that said artistic flair never was one of my strong points

also thanks for the links ill be sure to browse then carefully and add as apropreat

BTW why post here why not in he staff room over at the spyblocker board ? not that it matters i guess im just kinda curious

Iinteresting
Guest

ill try it explian what it is im trying to do have you ever had a stiuation where you got infected with somthin that your normal scanners couldnt remove say for the sake of arument somthing like coolweb

well this is where mini removel tools come in these are small tools such as coolweb shredder which are designed to deal with specific problems in this case cool web

ok as for the mini fix tools have you ever ran in to a problem on for which microsoft dont provide a fix say for the sake of argument you are affected by messenger spam well this is where mini fix tools come in these are tools that are designed to fix specific problems such as messenger spam what they do is to let you quickley and safley disable and/or patch the affeted parts of your system to provent attackers from talking advantage of these unfixed exploits

so what im trying to do is a compile a big list of all of the difrent mini fix/removal tools that are avalible so that when people have a problem they can quickley and easly find the tool thay need to fix there problem

i hope this is a lil more clear now

bigbuck

thanks for the link this is the sort of thing im lookin for ill be sure to add it to the list

[Infinity]

BTW why post here why not in he staff room over at the spyblocker board ? not that it matters i guess im just kinda curious

No prb in being curious Bethrezen, in the morning I log in here and after the check what has been updated at night and a quick check overall, I go to SpyBlocker Forum. that is the reason. after I posted here I saw it in our lounge at sb and gave said I answered here.

there are a few others but after work I'll give it to you at sb's.

cheers

[Bethrezen]

hi all

ok this is what I got so far is there any other mini fix/removal tools that I'm missing ??

Worm/Virus/Trojan Removal

BitDefender Removal Tools
Symantec Removal Tools
Kaspersky Labs Removal Tools
Bitdefender Removal Tools
Norman Antivirus Removal Tools
F-Secure Removal Tools
AVG Removal Tools
ETrust Removal Tools
McAfee AVERT Tools

Microsoft Removal Tools

Malicious Software Removal Tool

The Microsoft Windows Malicious Software Removal Tool checks Windows XP, Windows 2000, and Windows Server 2003 computers for and helps remove infections by specific, prevalent malicious software—including Blaster, Sasser, and Mydoom. When the detection and removal process is complete, the tool displays a report describing the outcome, including which, if any, malicious software was detected and removed

Blaster Worm Removal Tool

A situation has been identified where the Blaster worm could have infected some systems before the application of MS03-026 [KB823980] or MS03-039 [KB824146]. This tool will help remove the Blaster worm from these systems. For systems with MS03-026 [KB823980] or MS03-039 [KB824146] already installed, no further action is needed once this tool is installed. Install this tool to help remove this worm from your PC.

Mydoom, Zindos, and Doomjuice Worm Removal Tool

This tool helps to remove the Mydoom.A, Mydoom.B, Mydoom.E, Mydoom.F, Mydoom.G, Mydoom.J, Mydoom.L, Mydoom.O, Zindos.A, Doomjuice.A, and Doomjuice.B worms from infected systems. Once the tool has run—after the End-User License Agreement (EULA) is accepted—it automatically checks for infection and removes any of the targeted worms that are found. If a machine is infected with the Mydoom.B worm, the tool also provides the user with the default version of the hosts file and set the "read-only" attribute for that file. This action enables the user to visit previously-blocked Microsoft and antivirus Web sites.

Sasser (A to F) Worm Removal Tool

This tool will help to remove the Sasser (A-F) worm from infected systems. Once the tool has run—after the End-User License Agreement (EULA) is accepted—it automatically checks for infection and removes any of the targeted worms that are found.

Code Red II Cleaner

This tool was developed by Microsoft to eliminate the obvious damage that is caused by the Code Red II worm. This tool does not apply the patch that prevents future infection. You must install the patch on vulnerable systems. Before you run this tool, ensure you have read carefully the “More Information Page” listed below for complete instructions as well as information on how to apply the patch.

Panda & Avast! Removal Tools

Panda Quick Remover

The sophisticated techniques used by today's worms and go way beyond just infecting files. They can corrupt operating system components, change system settings and can even leave your computer out of action.

Panda QuickRemover is a tool aimed to complement our antivirus solutions, and is designed specifically to help restore your computer from all the possible effects of a virus.

Avast! Virus Cleaner Tool

Avast! Virus Cleaner is available free for every user. This tool will help you remove selected worm infections from your computer.

Adware/Spyware Removal

KazaaBegone

A Kazaa uninstaller which scans and removes all elements of all Kazaa versions, as well as all of the bundled software that comes with it.

Warning: This version has a bug that can cause your Internet connection to be broken when removing New.Net, WebHancer or CommonName. An update is being worked on. If you still want to use KazaaBegone, download LSPFix to fix your Internet connection (download it before you run KazaaBegone, of course).

Kazaa Spyware Removal

This program will remove the spyware that comes with kazaa. When you uninstall kazaa it does not uninstall the spyware so that is where this program is useful.

Kill2Me

A removal tool specifically for the Look2Me parasite. This tool removes versions 115, 116, 117 118, 120, 121 and 122 (the most recent ones) on Windows versions 95, 98, 98SE and ME.

Adware T.V. Media Removal Tool

This tool will help to remove the adware T.V. Media from affected computers. This adware interferes with successful installation of Windows XP Service Pack 2. T.V. Media is bundled with certain advertisement-supported applications such as Speed Blaster and Memory Meter. Users should uninstall these applications before running this tool and before installing Windows XP SP2.

AboutBuster

This tool removes the Home Search malware

Home Search Hijacker

Another tool for removing the Home Search malware

EliteToolbar Remover

This tool removes the EliteToolbar malware

Cool Web Shredder

CWShredder is the latest defence against the new Cool Web Search variants Originally developed by Merijn Bellekom of the Netherlands, now owned and maintained by InterMute CWShredder is a tool designed to clean Cool Web off your system

CoolWWWSearch.SmartKiller

CoolWWWSearch.SmartKiller (v1 and v2) is a new, real ugly variant of CoolWWWSearch. When running, it will close every browser window you use to visit a large list of anti-spyware-sites, and even will close Spybot-S&D and some other anti-spyware applications as well.

So if your copy of Spybot-S&D (or the anti-spyware application of your choice) closes a few seconds after starting, or your browser closes whenever you try to visit an anti-spyware site, try this CWS.SmartKiller removal utility.

RapidBlaster Killer

We have created a unique tool, RapidBlaster Killer, that can scan all running programs, detect RapidBlaster, and successfully terminate the process and remove the Run key registry entry. The newest version can also clean up various RapidBlaster remnants.

Since RapidBlaster will "morph" itself whenever it detects an un-installation attempt, removal with current anti-spyware software may not be successful. so you should try this tools instead

Plug-ins

The VX2 Cleaner Plug-in for Adaware

This new add-on for Adaware detects the VX2 malware and offers you the ability to remove it from your computer.

The Messenger-Control Plug-in for Adaware

If you've been connected to the Internet and suddenly see a window pop-up filled with information about the latest "get-rich-scheme," a college diploma, or low-rate credit cards, you're being spammed courtesy of Windows Messenger Service! The Messenger-Control Plug-in for Adaware offers you the ability to Quickly Safely and Easily turn off Windows Messenger Service.

The OE-W Messengerctrl Plug-in for Adaware

Disable Windows Messenger From Appearing When You Open Outlook Express

Many users opt not to use Microsoft Windows Messenger for their instant messenger program. Despite the fact that Microsoft Windows XP users have turned off the auto-start feature of Windows Messenger, it continues to open when Microsoft Outlook Express is use.

If you have disabled Windows Messenger's auto-start function, and you'd like it to remain closed while using Outlook Express, we have created an add-on which will allow you disable Messenger's auto-launch status when opening Outlook Express.

Fixes

BugOff

This little app disables a few exploits that are commonly used by browser hijackers (including CWS), thus protecting you from infection. This does not remove an existing infection! Applicable to everyone that uses Internet Explorer.

Windows Media Player Scripting Fix

Windows Media Player, by default, supports a dangerous feature that allows scripting to be embedded within media files. WMP will then execute the scripting when the media file is played.

The WMP Scripting Fix is a small application that disables Windows Media Player scripting simply, and easily, with the press of a button - scripting can also be re-enabled at a later date with this same program.

HTA Stop

It's now possible for a "rogue" website to actually embed trojans, worms and/or viruses directly into a web page. In the past, pages that offer seemingly attractive downloads which contain such malware required you to click to start any download to your computer. Now it's become automatic, using features in the Windows operating system known as scripting. These scripts can load programs without you knowing, and then they run immediately. All you have to do is visit the site, without doing anything besides viewing the page. HTAstop acts as a brickwall against these scripts, disabling them so the download doesn't occur.

DSO Stop2

The "DSO Exploit" was first reported on February 27, 2002 and a "workaround" for Microsoft's defective code was provided on March 3, 2002 involving the editing of the Windows registry to alter values contained within Internet Explorer's Internet Zones configurations. Because many computer users are extremely nervous (and justifiably so) about manually editing the Windows registry, owing to years of warnings and advisories as to the dangers of editing the registry, Privacy Software has provided this FREE utility to safely do it for you

Anti-Polymorphism Patch

This patch prevent Windows Scripts (such as VBScript and Javascript) from being able to read/write themselves, making Windows Script polymorphism nearly impossible through conventional means.

Saved Passwords Lock Patch

Microsoft Windows installs with a file called MPR.DLL (MPR standing for Multiple Provider Route). While the functions of this DLL are generally very useful, there is one exported function that is not required and is of particular concern to the security-conscious. the name of this exported function is WNetEnumCachedPasswords. what it does is to effectively allow Trojans to steal any saved passwords that are on your hard drive

This patch effectively (and safely) prevents programs from calling the function

Shoot The Messenger

Shoot The Messenger allows any Windows NT/2000/XP user to easily stop and disablethe unnecessary Messenger Service running in their machines.

UnPlug n' Pray

UnPlug n' Pray empowers all Windows users with the means to shut down the dangerous and unnecessary UPnP Internet server running in their machines.

DCOMbobulator

The DCOMbobulator allows any Windows user to quickly verify the effectiveness of Microsoft's DCOM security patch, then completely disable DCOM for greatly enhanced security.

XPdite

Ever since its original release, Windows XP has contained a critical flaw that could be trivially exploited at any time by any malicious hacker. By causing any Windows XP system to process a specially-formed URL (web-style link), the XP system would obediently delete all or most of the files within any specified directory. (That's not good.)

this tiny, utility can be used to instantly patch and secure any Windows XP system against this vulnerability.

FIX-CIH Virus Recovery

The CIH virus attempts to ERASE the writable FLASH BIOS of infected PC's, and also overwrites the first 2,048 sectors (1,048,576 bytes) of all of the system's available non-removable writable disk drives! While this behavior places the CIH virus among the nastiest of all viruses, the damage is more recoverable than at first appears The first time this happened I wrote this CIH hard drive recovery utility.

IE Fix

IE Fix was created one night out of frustration with Internet Explorer's MANY, many problems. Quite often, Internet Explorer's settings are targeted by spyware, and get, well...screwed up. Even worse, sometimes problems like this are caused seemingly at random. Toolbars disappear, pages won't load, and so on

To this end, I created this extremely simple, tool which when run, does nothing but replace the entire Internet Explorer registry tree with a clean one.

Warning: This is not guaranteed to fix anything, nor is it a pretty solution, I HIGHLY suggest you try everything else you've got in your arsenal before this, as it WILL mess up your settings and I make absolutely no guarantee that it will be effective, or even that it won't hose IE completely.

[gerardwil]

Maybe LSP fix? But be sure how to use it

[Bethrezen]

gerardwil

thats not a bad idea but id also need the url to the instructions coz using that could really mess things up if you dont know what you are doing

may be a good idea to add a couple of other net conection fix tools as well

[Bethrezen]

hi

I added LSP Fix but now I'm wondering if there are any other Winsock repair tools available

because sometimes its it actually necessary to restore the networking components to default because they have been hijacked or corrupted now I know this can be done manually but its better to have a program to do it for you automatically because its less likely to screw everything up

I know there are a couple listed at the bottom of the page you mentioned but the link for the XP one is invalid

so do you know of any others ??

oh also something that may be of interest to people there is now a tool listed for finding and removing super hidden files that are not visible even when show hidden files is active Delete Invalid Files

handy for situations like this

each night, my Norton 2004 Anti Virus runs and every morning it reports that yup, it found the same two .dlls

C:\WINNT\Downloaded Program Files\CONFLICT.1\webdlg32.dll

Source: C:\WINNT\Downloaded Program Files\webdlg32.dll

and would I like to remove them. I say yes, Norton fails and I skip ahead. each morning is the same.

but, I have tried to find these two to delete them myself....and that's the problem....I can't find them. using my search for a file also does not find them either....

credit goes to JVRudnick for the find

[Kye-U]

I think you're missing SpywareBlaster?

Anyways, another good Winsock fixer is "WinsockXPFix.exe".

It's pretty rare to find on the net, but here it is: http://www.spychecker.com/program/winsockxpfix.html

[Bethrezen]

hi

SpywareBlaster is listed eles where as its is an actual program as aposed to a mini tool designed to deal with a specific situation thats why its not listed in the mini removal/fixes section if you look at the full guide found here

http://spyblocker-software.com/IPB/i...showtopic=1762

you will see what i mean

BTW thanks for the link to WinSock XP Fix