Section Image

Malware Tools

We have seen the number of virus infections steadily increase every month. In order to protect our network and protect the computers of our residents, we are asking our student residents to make sure there computers are up-to-date with Operating System patches as well as the latest definition files of the anti-virus scanners listed below. It is only necessary to have one of these installed and up-to-date.

The following is a list of real-time anti-virus scanners:

The following is a list of manual anti-virus scanners. The scan engine must be started manually. You will need a real-time scanner installed above to protected at all times but if you were to become infected, this list contains additional scanners that you may use to remove the virus infection.

The following is a list of specific virus removal tools. These tools are only intended to be used for the specific virus infection mentioned. You only need these if you are infected with that virus as they are a great way to completely remove the virus.


F-Bot

F-Bot is a utility from F-Secure used for removing particular variants of Agobot, Wootbot, SdBot, RBot, SpyBot, ForBot, and IRCBot backdoor viruses. More information is available in the readme file. It can be downloaded here.

Badtrans.b

F-Secure's tool to expose the Badtrans.b worm to deletion upon restart can be downloaded here.

Bagle

Please read the readme for a list of variants of the Bagle worm that can be neutralized with F-Secure's F-Bagle utility. Download here.

BugBear

The W32/Bugbear.A and 32/Bugbear.B can be neutralized using F-Secure's F-Bugbr. Be sure to view the readme before using the utility.

CodeRed

To detect and remove the CodeRed.C and CodeRed.F worms from a system, use F-Secure's F-Codered utility. The readme can be found here and the utility can be downloaded here.

CIH

To identify and terminate the CIH virus process, run F-Secure's F-CIH. This utility will not remove the virus from the system. After running the utility, it is necessary to use an Anti-Virus scan to clean the infected system.

CoolNot

The CoolNote tool from F-Secure for reversing the effects of the CoolNot worm can be found here.

Downadup

Symantec's tool for neutralizing the Downadup virus can be found here. Symantec's information on the utility has been posted here.

Deborm

F-Secure's F-Deborm utility neutralizes the Deborm worm and its associated generated malware. Please read the readme before using the utility.

FunLove

To download F-Secure's AntiFun tool to prevent the FunLove virus from its most common form of system entry. Decompress and execute this application. The readme is available here.

Sircam

F-Secure's AntiSirc tool for assistance in removing the Sircam worm is available here. The readme is available here.