Cart
Designed for technical users. These utilities were created by our anti-malware engine provider, Kaspersky Lab. Check "More Information" links for instructions. If you have further questions, contact Kaspersky Lab's virus analysts at newvirus@kaspersky.com, or go to virus-related issues forum.
Utility
What it does
Command line
Rescue Disk
Rescue Disk for operating system or anti-virus solution failure.
none
Use the Rescue Disk (iso image) when a computer is so damaged that the operating system or anti-virus solution fails to launch correctly.
Rescue Disk is a Linux-based .iso image that includes the following:
Rescue Disk is a Linux-based .iso image that includes the following:
- system and configuration Linux files
- a set of utilities to diagnose the system
- a set of additional utilities (file manager etc)
- Rescue Disk files
- Anti-virus databases files
none
AVZ
Analyzes and disinfects new malware
none
Downloads new anti-virus databases, scans your system, removes infected files and creates a report with results.
none
klwk.com
Detects and removes malware View list
View command lines
/s - to force scanning of hard drives. Program will scan hard drives for infection in any case.
/n - to force scanning of mapped network drives.
/path - to force scanning specified path
/y - end program without pressing any key.
/i - show command line info.
/nr - do not reboot system automatically in any case.
/Rpt[a][o][=] - create report file
a - add report file
o - report only (do not cure/delete infected files)
/n - to force scanning of mapped network drives.
/path - to force scanning specified path
/y - end program without pressing any key.
/i - show command line info.
/nr - do not reboot system automatically in any case.
/Rpt[a][o][=] - create report file
a - add report file
o - report only (do not cure/delete infected files)
clrav.com
Detects and removes malware View list
View command lines
/s[n] - to force scanning of hard drives. Program will scan hard drives for I-Worm.Klez.a(e,f,g,h) infection in any case.
n - include scanning of mapped network drives.
/y - end program without pressing any key.
/i - show command line info.
/nr - do not reboot system automatically in any case.
/Rpt[a][o][=] - create report file
a - add report file
o - report only (do not cure/delete infected files)
n - include scanning of mapped network drives.
/y - end program without pressing any key.
/i - show command line info.
/nr - do not reboot system automatically in any case.
/Rpt[a][o][=] - create report file
a - add report file
o - report only (do not cure/delete infected files)
KL Anti-FunLove
Disinfects worm Win32.FunLove
View command lines
Disinfects worm Win32.FunLove
/i - to install programm.
/u - to uninstall programm.
/hide[i][s] - hide
i - installation window
s - work window
/u - to uninstall programm.
/hide[i][s] - hide
i - installation window
s - work window
Anti-Nimda
Disinfects I-Worm.Nimda
none
Virus Removal Tool
Remove all types of infections
none
Remove all types of infections from your computer.
IMPORTANT: This tool conflicts with security software—you must uninstall it before you install ZoneAlarm.
Designed for one-time use. Does not provide ongoing detection and removal.
IMPORTANT: This tool conflicts with security software—you must uninstall it before you install ZoneAlarm.
Designed for one-time use. Does not provide ongoing detection and removal.
none
KK
Removes Conficker
View command lines
Removes Conficker (aka Downadup, Net -Worm.Win32.Kido)
-p <Scan path> - scan a defined folder
-f - scan hard disks
-n - scan network disks
-r - scan flash drives, scan removable hard disks connected via USB and Fire Wire
-y - end program without pressing any key
-s - silent mode (without a black window)
-l <file_name> - write info into a log
-v - extended log maintenance (the switch -v works only if the -l switch is entered in the command prompt)
-j - restore the registry branch SafeBoot (if the registry branch is deleted, computer cannot boot in safe mode)
-z - restore the services
-x - restore display of hidden system files
-m - monitoring mode to protect the system from getting infected
-a - disable auto start from all drives
-f - scan hard disks
-n - scan network disks
-r - scan flash drives, scan removable hard disks connected via USB and Fire Wire
-y - end program without pressing any key
-s - silent mode (without a black window)
-l <file_name> - write info into a log
-v - extended log maintenance (the switch -v works only if the -l switch is entered in the command prompt)
-j - restore the registry branch SafeBoot (if the registry branch is deleted, computer cannot boot in safe mode)
-z - restore the services
- Background Intelligent Transfer Service (BITS),
- Windows Automatic Update Service (wuauserv),
- Error Reporting Service (ERSvc/WerSvc)
- Windows Defender (WinDefend),
- Windows Security Center Service (wscsvc).
-x - restore display of hidden system files
-m - monitoring mode to protect the system from getting infected
-a - disable auto start from all drives
ZbotKiller
Removes Trojan programs in the Trojan-Spy.Win32.Zbot family
View command lines
Removes Trojan programs in the Trojan-Spy.Win32.Zbot family
-y - end program without pressing any key
-s - silent mode (without a black window)
-l <file_name> - write info into a log
-v - extended log maintenance (should be entered with the -l switch)
-help - show the list of all parameters
-s - silent mode (without a black window)
-l <file_name> - write info into a log
-v - extended log maintenance (should be entered with the -l switch)
-help - show the list of all parameters
TDSSKiller
Removes malware in the family Rootkit.Win32.TDSS
View command lines
Removes malware in the family Rootkit.Win32.TDSS
-l <file_name> - write info into a log
-v - extended log maintenance (should be entered with the -l switch)
-d - search for a specific malicious service name
-o <file_name> - save a dump into the specified file. This dump is needed for analysis in case of problems with detection
-v - extended log maintenance (should be entered with the -l switch)
-d
-o <file_name> - save a dump into the specified file. This dump is needed for analysis in case of problems with detection
KatesKiller
Removes malware in the family Trojan-PSW.Win32.Kates
View command lines
Removes malware in the family Trojan-PSW.Win32.Kates (also known as W32/Daonol)
-y - end program without pressing any key
-s - silent mode (without a black window)
-l <file_name> - write info into a log
-v - extended log maintenance (should be entered with the -l switch)
-s - silent mode (without a black window)
-l <file_name> - write info into a log
-v - extended log maintenance (should be entered with the -l switch)
SalityKiller
Removes Virus.Win32.Sality.aa
View command lines
Removes Virus.Win32.Sality.aa
-p <path> - scan a defined folder
-n - scan network disks
-r - scan flash drives, scan removable hard disks connected via USB and Fire Wire
-y - end program without pressing any key
-s - silent mode (without a black window)
-l <file_name> - write info into a log
-v - extended log maintenance (the switch -v works only if the -l switch is entered in the command prompt)
-x - restore display of hidden system files
-a - disable auto start from all drives
-m - monitoring mode to protect the system from getting infected
-q - scan the system and then go to monitoring mode
-k - the utility will scan all disks, detect files autorun.inf created by the virus Virus.Win32.Sality and eliminate them. It will also delete the executable file linked by autorun.inf, even if such file has been already disinfected.
-n - scan network disks
-r - scan flash drives, scan removable hard disks connected via USB and Fire Wire
-y - end program without pressing any key
-s - silent mode (without a black window)
-l <file_name> - write info into a log
-v - extended log maintenance (the switch -v works only if the -l switch is entered in the command prompt)
-x - restore display of hidden system files
-a - disable auto start from all drives
-m - monitoring mode to protect the system from getting infected
-q - scan the system and then go to monitoring mode
-k - the utility will scan all disks, detect files autorun.inf created by the virus Virus.Win32.Sality and eliminate them. It will also delete the executable file linked by autorun.inf, even if such file has been already disinfected.
Antiboot
Removes Backdoor.Win32.Sinowal.deg
View command lines
Removes Backdoor.Win32.Sinowal.deg and some its modifications.
-l <file_name> - write info into a log
The utility generates boot sector dumps (MBR) of the disks infected with the malicious program.
Dump file names are <file_name>.origmbrXX and <file_name>.curedmbrXX.
The files *. origmbrXX contain original MBR copies (before disinfection).
The files *.curedmbrXX contain cured MBR copies.
The XX number depends on the hard disk drive location on PCI bus.
-p <folder_name> - use it to create MBR dump files on all hard disk drives.
The utility generates boot sector dumps (MBR) of the disks infected with the malicious program.
Dump file names are <file_name>.origmbrXX and <file_name>.curedmbrXX.
The files *. origmbrXX contain original MBR copies (before disinfection).
The files *.curedmbrXX contain cured MBR copies.
The XX number depends on the hard disk drive location on PCI bus.
-p <folder_name> - use it to create MBR dump files on all hard disk drives.
VirutKiller
Removes Virus.Win32.Virut.ce
View command lines
Removes Virus.Win32.Virut.ce
-p - scan a defined folder.
-n - scan flash data storage devices.
-r - scan removable media.
-y - when the utility finishes, its window will be closed.
-s - silent mode (without a black window).
-l <file_name> - write info into a log.
-v - extended log maintenance (the switch -v works only if the -l switch is entered in the command prompt).
-n - scan flash data storage devices.
-r - scan removable media.
-y - when the utility finishes, its window will be closed.
-s - silent mode (without a black window).
-l <file_name> - write info into a log.
-v - extended log maintenance (the switch -v works only if the -l switch is entered in the command prompt).
XoristDecryptor
Removes malware of the family Trojan-Ransom.Win32.Xorist
View command lines
Removes malware of the family Trojan-Ransom.Win32.Xorist
-l <file_name> - write info into a log
-y - close the window after the utility work is over.
-y - close the window after the utility work is over.
PMaxKiller
Removes malware of the family Rootkit.Win32.PMax
View command lines
Removes malware of the family Rootkit.Win32.PMax
-c <file_name> - reset DACL on the indicated file (in order to eliminate blocking of execution of legal processes by the malware).
-d <file_name> - dump malicious driver into the file.
-l <file_name> - write utility runtime log into the file.
-v - output a detailed log (of used with key -l).
-d <file_name> - dump malicious driver into the file.
-l <file_name> - write utility runtime log into the file.
-v - output a detailed log (of used with key -l).
Virus.Win32.Xpaj
Disinfect a PC from Virus.Win32.Xpaj
View command lines
Disinfect a PC from Virus.Win32.Xpaj
-l <file_name> - write log to the file.
-v - detailed logging (must be used in combination with the parameter -l).
-s ;- scan in "silent" mode (without opening console box).
-y - when the utility finishes, its window will be closed.
-p <folder_path> - scan a specific folder.
-r - scan removable drives (flash), external USB and FireWire hard disks.
-n - scan network drives.
-v - detailed logging (must be used in combination with the parameter -l).
-s ;- scan in "silent" mode (without opening console box).
-y - when the utility finishes, its window will be closed.
-p <folder_path> - scan a specific folder.
-r - scan removable drives (flash), external USB and FireWire hard disks.
-n - scan network drives.