Kaspersky TDSSKiller 2.5.8.0

released today
very easy to use.

available here:
http://www.majorgeeks.com/Kaspersky_TDSSKiller_d6895.html

 

Thanks for the news of the update! I've been wanting to try out TDSSKiller for a while now.

If anyone can field them, I do have a couple of questions, though. First, what's the false positive rate for TDSSKiller? And second, is this a safe tool to use on a machine that is suspected clean, just to be sure? I'm wondering how much trouble one can get into by running the tool. Combofix, for example, is something that I'd never run unless I absolutely have to, and could break a computer quite easily if run when one shouldn't. Will TDSSKiller have any adverse impact on a system, regardless of rootkit presence?

 

these type of small specialized ARK app do not usually generate any FP.
i've never seen one anyway...

anyway, the app doesn't not install anything and can be run from a USB key.

you just launch it and scan, it tells you if it finds anything and if you would like a report, then it ask you if you want to clean if it finds anything.

that's all there is to it.
it's completely safe to use, AFAICT.

 

I hadn't realized until now that TDSSKiller is a general-purpose rootkit and bootkit ARK. It's the top pick at Best Free Rootkit Scanner and Remover.

 

I have been running this since June. Currently, the latest version is 2.6.22.

You can always get the latest version > hxxp://support.kaspersky.com/downloads/utils/tdsskiller.exe

 

Also worth noting that it will attempt to update to the latest version before it runs. I wouldn't count on that though - best to keep the latest version on hand.

 

I have been using this for a while. It is a nice specialized app.

 

I can't figure for the life of me why, when I run this tool it is slow in one of my snapshots.

BTW, I just saw the video referred to in this Using Kaspersky TDSSKiller

 

ye its a brilliant tool ,i can testify to its quality by using it on multiple client machines

 

Note that it is being updated regularly - current version is 2.7.3

 

I downloaded 2.7.5.0 today from the Kaspersky site.

Al

 

Thanks! I usually DL from Majorgeeks because they update frequently, but they're lagging with TDSSkiller at the moment. Have you ever seen a changelog?

 

2.7.6.0 downloaded and run just a few minutes ago.

 

Does it only detect rootkits or other malware too?

 

Detects:
Rootkit.Win32.TDSS; Rootkit.Win32.Stoned.d; Rootkit.Boot.Cidox.a;Rootkit.Boot.SST.a; Rootkit.Boot.Pihar.a,b; Rootkit.Boot.MyBios.b;
Rootkit.Boot.Bootkor.a; Rootkit.Win32.TDSS.mbr; Rootkit.Boot.Wistler.a; Rootkit.Win32.ZAccess.aml,c,e,f,g,h,i,j,k; Rootkit.Boot.SST.b; Rootkit.Boot.Fisp.a; Rootkit.Boot.Nimnul.a; Rootkit.Boot.Batan.a; Rootkit.Boot.Lapka.a; Backdoor.Win32.Trup.a,b; Backdoor.Win32.Sinowal.knf,kmy; Backdoor.Win32.Phanta.a,b; Trojan-Clicker.Win32.Wistler.a,b,c; Virus.Win32.TDSS.a,b,c,d,e; Virus.Win32.Rloader.a; Virus.Win32.Cmoser.a;
Virus.Win32.Zhaba.a,b,c; Trojan-Dropper.Boot.Niwa.a.
List here: -http://support.kaspersky.com/viruses/utility

 

if you want a tool to detect all forms of malware and the ability to select where to scan you may want to look at avptool. you will need to redownload it to update it.

btw i can vouch for the effectiveness of tdsskiller as i have used it successfully on multiple of my clients systems.