Windows Virus Fixes

Microsoft have today (13 May) released a patch for XP SP3 to address the vulnerability exploited by WanaCrpyt0r

ANTIKAK.EXE ( 391kb ) : Windows 95/98 fix removes the KAK Virus from ProgramFiles\startup.

CLEANCIH.EXE ( 18kb ) : This will remove the CIH virus form your system.

Q240308.EXE ( 109kb ) : Official Microsoft patch : Security Update for Outlook Express 5 or higher.

01-ANTISST.EXE ( 62kb )
: VBS.SST.A Virus removal util. see ( ) for info.

Q300972_W2K_SP3_x86_en.EXE ( 241kb ) : Sircam Antivirus Fix for Windows 2000 from microsoft.

Q300972I-NT4.EXE ( 237kb ) : Sircam Antivirus Fix for Windows NT4 from microsoft.

ILYClean.exe ( 67kb ) : Virus Removal fix for, I Love You Virus. ( 450kb ) : Virus Removal fix for, W32.Nimda.E Active Desktop may need reseting after running this program. ( 143kb ) : Klez Virus Removal fix for, W32.klez.gen@mm and W32.Elkern.gen Active Desktop may need reseting after running this program.

FxBgbear.exe ( 175kb ) : W32.Bugbear@mm removal util.

FixOpsrv.exe ( 165kb ) : W32.Opaserv.Worm removal util.

FixFreth.exe ( 175kb ) : W32.Frethem removal util.

FixBadtr.exe ( 122kb ) : W32.Badtrans.B removal util.

FixBlast.exe ( 140kb ) W32.Blaster.Worm, W32.Blaster.B.Worm, and W32.Blaster.C.Worm Symantic Removal Tool.

It uses a vulnerability in Internet Explorer to execute directly from e-mail.
Swen worm appeared on 18th of September 2003.
It is most likely written by the author of Gibe worm (Begbie)
and this worm has similar features as the latest Gibe variants.

FixWelch.exe ( 173kb ) : Fixes Welcha Virus removal util. Attempts to download the DCOM RPC patch from Microsoft's Windows Update Web site
, install it, and then reboot the computer. Checks for active machines to infect by sending
an ICMP echo request, or PING, which will result in increased ICMP traffic.
Attempts to remove W32.Blaster.Worm.

One of the leading experts (Symantec) have developed virus removal tools to clean...

W32.Swen.A@mm infections
Trojan.Qhosts infections
W32.Mimail variants
W32.Sober variants
W32.HLLW.Gaobot variants
W32.Beagle.A@mm infections
W32.Novarg.A@mm Infections

FixSasser.exe - ( 149kb ) : A fix for Sasser Worm - W32.Sasser.Worm@mm Quick Fix


Malicious Software Removal Tool - ( 290kb )

Microsoft® Windows® Malicious Software Removal Tool (KB890830) This tool checks your computer
for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom)
and helps to remove the infection if it is found. Microsoft will release an updated version of this
tool on the second Tuesday of each month.

This tool scans for and cleans malicious software associated with:
• Bagle • Berbew • Blaster • Bropia • DoomJuice • Gaobot • Goweh • Korgo •
Mydoom • Nachi • Netsky • Randex • Sasser • Sober • Sobig • Zafi • Zindos

MSN Messenger virus warning If you use MSN Messenger, you could be vulnerable
to a new virus in circulation. You may receive a message from a friend or contact
advising you to look at a link or download a file with '.pif' at the end,
e.g. 'love_me.pif', 'Drunk_lol.pif' or 'Webcam_004.pif'.
Please delete this message, and do not click on the link

Security Master AV Removal Tool - Removes the rogue software.