 Quick Find |
|
|
 |
Prevention
|
|
|
|
Detection
|
|
|
|
Removal
|
|
|
|
|
| Removal Tools & Instructions |
|
|
|
Symantec's Removal Tools Repository 
|
|
 |
Tools come with usage instructions and with explanation of what the tool will do to your system and why
|
|
Removal tools for the following malware (as of 10-2-2002)
|
|
- W32.Bugbear@mm
- W32.Opaserv.Worm
- W32.Frethem
- W32.Yaha
- Backdoor.Autoupder
- W32.Klez
- W32.Gibe@mm
- W32.MyLife
- W32.Goner.A@mm
- W32.Badtrans.B@mm
- W32.Nimda.E@mm
- W32.Nimda.A@mm
- W32.Magistr
- CodeRed
- W32.Sircam.Worm@mm
- VBS.Haptime
- W95.HybrisF
- W32.Kriz
- W32.Navidad
- W32.HLLW.QAZ.A
- W95.MTX
- W32.FunLove.4099
- Wscript.Kakworm
- Wscript.Kakworm.B
- Happy99.Worm
- VBS.Loveletter
- PrettyPark.Worm
- VBS.Stages.A
- W2K.Stream
- AOL.Trojan.32512 (BuddyList)
- W95.CIH
- Worm.ExploreZip
- VBS.Potok@mm
|
|
|
Symantec's Removal Tools Online Tutorials
|
|
|
Most tutorials have both Shockwave and text versions
|
|
Step-by-step help with the following topics (as of 10-2-2002)
|
|
- How to remove W32.Goner.A@mm
- How to remove W32.Navidad worm program
- How to remove Wscript.KakWorm in DOS mode
- How to remove the W32.HLLW.Bymer worm
- How to remove W95.Hybris.Gen worm
- How to remove W32.Badtrans.B@mm worm
- How to remove the Klez virus *NEW*
- How to remove PWSteal Trojan
- How to remove the W95.MTX virus
|
|
|
Code Red
|
|
|
Instructions
|
|
- Download the stand-alone removal tool for the Code Red virus: CodeRedCleanup.exe
- Open a command prompt (You can click on Run under the Start Menu , type cmd and hit Enter).
- Once you have your command prompt open, go to the directory that you downloaded into in Step 1.
- To clean the machine, type CodeRedCleanup at the command prompt.
- If you wish to completely disable IIS on your machine (HIGHLY Recommended), type
CodeRedCleanup -disable at the command prompt.
|
|
|
Nimda
|
|
|
Instructions
|
|
- Download the stand-alone removal tool for the Nimda virus: nfrvscan.zip
- Unzip the file you just downloaded, using WinZip or a comparable program.
- Open a command prompt (You can click on Run under the Start Menu, type cmd and hit Enter).
- Once you have your command prompt open, go to the directory you unzipped into in Step 2.
- To scan all local drives, type nfrvscan /drives at the command prompt.
|
|
|
|
Return to Top
|
" Indicates a link to an external (non-UMBC)
