Section Image
Malware Tools
The following tools can be used to scan your computer for malicious software:
- Windows Malicious Software Removal Tool
- McAfee VirusScan Enterprise - FREE for UF Students including lifetime definition updates
- MalwareBytes Anti-Malware
- Sophos Security Tools
We have also provided a list of infection-specific removal tools. Please find the appropriate tool for your case.
Please only download the tool for the malicious software that was detected on your computer. Improper use of these tools may result in further damage to the infected system.
___Bot
F-Bot is a utility from F-Secure used for removing particular variants of Agobot, Wootbot, SdBot, RBot, SpyBot, ForBot, and IRCBot backdoor viruses. More information is available in the readme file. It can be downloaded here.
Badtrans.b
F-Secure's tool to expose the Badtrans.b worm to deletion upon restart can be downloaded here.
Bagle
Please read the readme for a list of variants of the Bagle worm that can be neutralized with F-Secure's F-Bagle utility. Download here.
BugBear
The W32/Bugbear.A and 32/Bugbear.B can be neutralized using F-Secure's F-Bugbr. Be sure to view the readme before using the utility.
CodeRed
To detect and remove the CodeRed.C and CodeRed.F worms from a system, use F-Secure's F-Codered utility. The readme can be found here and the utility can be downloaded here.
CIH
To identify and terminate the CIH virus process, run F-Secure's F-CIH. This utility will not remove the virus from the system. After running the utility, it is necessary to use an Anti-Virus scan to clean the infected system. If you are incapable of doing this, the UF Computing Help Desk can perform this for you. Please note that as of 2/4/2009, the UF Computing Help Desk charges $35 for virus scans and removal.
CoolNot
The CoolNote tool from F-Secure for reversing the effects of the CoolNot worm can be found here.
Downadup
Symantec's tool for neutralizing the Downadup virus can be found here. Symantec's information on the utility has been posted here.
Deborm
F-Secure's F-Deborm utility neutralizes the Deborm worm and its associated generated malware. Please read the readme before using the utility.
FunLove
To download F-Secure's AntiFun tool to prevent the FunLove virus from its most common form of system entry. Decompress and execute this application. The readme is available here.