F-Force
ftp://ftp.f-secure.com/anti-virus/tools/f-force.zip
http://www.f-secure.com/tools/f-force.zip
Signatures for F-Force
http://download.f-secure.com/latest/latest.zip
ftp://ftp.f-secure.com/anti-virus/updates/latest/latest.zip
F-Force is a free malware disinfection utility created by F-Secure
Corporation.
The F-Force utility disinfects computers infected with known variants of
the following malware:
Agobot (Backdoor.Win32.Agobot)
Aimbot (Backdoor.Win32.Aimbot)
Bagle (Email-Worm.Win32.Bagle, except .N, .O, .P, .Q, .R variants)
Bozori (Net-Worm.Win32.Bozori)
Codbot (Backdoor.Win32.Codbot)
Dumaru (Email-Worm.Win32.Dumaru)
Fanbot (Backdoor.Win32.Fanbot)
Feebs (Worm.Win32.Feebs)
Forbot (Backdoor.Win32.Forbot)
IRCBot (Backdoor.Win32.IRCBot)
Mitglieder (Trojan-Proxy.Win32.Mitglieder or Trojan-Spy.Win32.Mitglieder)
Mydoom (Email-Worm.Win32.Mydoom)
Mytob (Net-Worm.Win32.Mytob)
Netsky (Email-Worm.Win32.NetSky)
Padobot (Net-Worm.Win32.Padobot)
Poebot (Backdoor.Win32.Poebot)
Rbot (Backdoor.Win32.Rbot)
SDBot (Backdoor.Win32.SdBot)
Spybot (P2P-Worm.Win32.SpyBot)
Wootbot (Backdoor.Win32.Wootbot)
Zafi (Email-Worm.Win32.Zafi)
Also the utility can remove the following malware:
VB.bi (Email-Worm.Win32.VB.bi)
Nyxem.e (Email-Worm.Win32.Nyxem.e)
In addition the F-Force utility detects EICAR test file.
The F-Force utility might be able disinfect computers that are infected
with new variants of these backdoors and worms, however disinfection will
only work if these variants are detected generically by AVP engine.
The F-Force utility disinfects Windows HOSTS file by removing entries that
were added by malware. In addition the utility automatically restores the
default EXE file startup string in case it was modified by malware.
The F-Force utility creates a log file named F-FORCE.LOG in the root
Windows directory (usually C:\WINDOWS). The log file is appended every
time the F-Force utility is run.