CaSIR is a FREE software (for personal use only). to remove CaSIs.
CaSIs is short for Common and Stubborn Infectors. These are malicious programs (Viruses, Worms, Trojans, etc.) that are notoriously difficult to detect and to remove by regular anti-virus programs. These malicious programs often have the capability to disable your computer or your anti-virus programs.
Good examples of these infectors are:
- Win32.Brontok.q
- Win32.Delf.cc
- Win32.VB.by
- Win32.VB.cz
- Trojan.Win32.Small.wv (Medichi & Medichi2)
- Trojan-Downloader.Win32.Todon.ai
- Trojan-Downloader.Win32.Todon.aj
- Worm.Win32.AutoRun.dkk (Ahsan virus)
- Trojan-Downloader.Win32.VB.bbl
If one of the above nasty infectors infected your computer, you will not be able to install any of the well-known Antivirus software like Kaspersky, Mcafee, Norton, AVG, Panda... (and about 135 more different AVs!) and please, don't try to use Safe Mode to remove them manually because those infectors will disable "Safe Mode"!
If CaSIR detected any CaSIs, it will restart your computer and works in what we call "Pre-$hell mode", after finishing it's job, CaSIR will restart your computer in Normal mode.
OS: Windows XP, Windows Vista, Windows 7
http://www.sergiwa.com/download/security/CaSIR.zip
------------------------------------------------------------------------------------------------------------
iReset v1.3 - 68 KB
Some malware do change your files' attributes to system/hidden but when you want to change them back to normal you wont be able to do that because the options are grayed.
iReset resets your system/hidden files/folders so you can view/access them normally.
Simply drag & drop your files/folders into the cross sign and then click RESET.
Important note: Since this tool is a security software that deals with the file system, the system registry and the running processes, it MUST be given all the rights it demands in order for it to do it's job. Some other security softwares will try to block the tool and prevent it from doing its job, please make sure that it's not blocked by your filewall and there's no other program blocking it.
Before running this tool, we recommend you to disable any other security solution you are runing such as Antivirus, Firewall, monitoring tools ..etc.
This tool is for FREE for personal use only!
OS: Windows XP, Windows Vista, Windows 7
http://www.sergiwa.com/download/security/iReset.exe
------------------------------------------------------------------------------------------------------------
MLFRT v1.2 - 60 KB
. Doesn't your Mozilla Firefox browser start?
. Can't you install Antivirus and security software?
. You cannot access your Windows Registry Editor?
. When you double click on one of your hard drive partitions, does it show you some unexpected results?
. Does your Internet Explorer title read "MyLoveFaceBook.LiuYiFei@Hotmail.CoM"?
If your answer was �Yes� to any of the above questions then the chances are that you may be infected with the so called "mylovefacebook" virus or one of its variants:
The problem is that this virus is particularly cumbersome to remove, even by reputable anti-virus programs. But we have the solution and it is called MLFRT (or mylovefacebook Removal Tool)!
This tool removes the so called "mylovefacebook virus". It removes it from all your hard drive partitions including floppy disks and USB flash disks (those must be write enabled during the scan process).
Start your computer in Safe mode and run this tool, click Remove then follow the instructions on screen.
Important note: Before running this tool, we recommend you to disable any other security solution you are running such as Antivirus, Firewall, monitoring tools ..etc.
This tool is for FREE for personal use only!
OS: Windows XP, Windows Vista, Windows 7
http://www.sergiwa.com/download/security/MLFRT.exe
------------------------------------------------------------------------------------------------------------
PRT v2.7 - 60 KB
It detects and removes all traces of the Perlovga virus from your system, including floppy disks and USB flash disks (the latter ones must be write enabled during the scan process).
It also removes the leftovers of this virus by removing the 'autorun.inf' files and cleaning up you system registry.
Start your computer in Safe mode and run this tool. If you have infected floppy/flash disks you can insert them and click start. You can repeat this process for every disk you have.
Important note: Since this tool is a security software that deals with the file system, the system registry and the running processes, it MUST be given all the rights it demands in order for it to do it's job.
Before running this tool, we recommend you to disable any other security solution you are runing such as Antivirus, Firewall, monitoring tools ..etc.
This tool is for FREE for personal use only!
http://www.sergiwa.com/download/security/PRT.exe
------------------------------------------------------------------------------------------------------------
SMF v1.1 - 112 KB
Safe Mode is a special way for Windows to load when there is a system-critical problem that interferes with the normal operation of Windows. The purpose of Safe Mode is to allow you to troubleshoot Windows and try to determine what is causing it to not function correctly. Once you have corrected the problem, then you can reboot and Windows will load normally.
Well, Many viruses corrupt Windows Safe Mode in order to prevent you from removing them. If you cannot boot in safe mode then you are in a very critical situation; you cannot make any repairs and reinstalling the entire system is your only choice.
This handy tool repairs Windows Safe Mode and gives you back the full control over your computer.
Important note: Before running this tool, we recommend you to disable any other security solution you are running such as Antivirus, Firewall, monitoring tools ..etc.
This tool is for FREE for personal use only!
OS: Windows XP, Windows Vista, Windows 7
http://www.sergiwa.com/download/security/SMFixer.exe
------------------------------------------------------------------------------------------------------------
SRT v2.6 - 76 KB
- Sick and tired of constantly seeing the New Folder.exe file in the root path of every storage media you have?
- Sick and tired of constantly seeing a new folder inside every folder you have?
- When you doubleclick on one of your hard drive partitions, does it show you some unexpected results?
- When you rightclick on one of your hard drive partitions, do you see a new item called "Autoplay" on top of other items with bold face?
- When you right click on one of your hard drive partitions, do you see some new items with garbage text?
- When your Antivirus detects and deletes the malware that causes all of that and restart your system, do you see an error message similar to: "Windows cannot find SSCVIIHOST.exe..."?
If your answer was �Yes� to any of the above questions then the chances are that you may be infected with the Sohanad virus (otherwise known as New Folder.exe) or one of its variants:
- IM-Worm.Win32.Sohanad.as
- IM-Worm.Win32.Sohanad.ao
- IM-Worm.Win32.Sohanad.am
- IM-Worm.Win32.Sohanad.ap
The problem is that this virus is particulary cumbersome to remove, even by reputable anti-virus programs. But we have the solution and it is called SRT (or Sohanad Removal Tool)!
It detects and reoves all traces of the Sohanad virus from your system, including floppy disks and USB flash disks (the latter ones must be write enabled during the scan process).
It also removes the leftovers of this virus by removing the 'autorun.inf' files and cleaning up you system registry, so you won�t see the 'autoplay' item anymore.
Important note: Before running this tool, we recommend you to disable any other security solution you are runing such as Antivirus, Firewall, monitoring tools ..etc.
This tool is for FREE for personal use only!
OS: Windows XP, Windows Vista, Windows 7
