File Size : 4.8 Mb

Kaspersky TDSSKiller is a small powerful tool to detect and remove rootkits, malicious programs that surreptitiously introduced into the system and hooks system functions. Kaspersky TDSSKiller designed to combat malware family Rootkit.Win32.TDSS (Tidserv, TDSServ, Alureon); bootkit; rootkits. Works without installation and can be run as a normal and safe mode. It supports 32-bit and 64-bit operating systems.

Kaspersky Lab has developed the TDSSKiller utility that allows removing rootkits.
The utility supports 32-bit and 64-bit operation systems.
The utility can be run in Normal Mode and Safe Mode.

It detects and removes the following malware:
malware family Rootkit.Win32.TDSS;
bootkits;
rootkits.

List of malicious programs:
Rootkit.Win32.TDSS, Rootkit.Win32.Stoned.d, Rootkit.Boot.Cidox.a, Rootkit.Boot.SST.a, Rootkit.Boot.Pihar.a,b,c, Rootkit.Boot.CPD.a, Rootkit.Boot.Bootkor.a, Rootkit.Boot.MyBios.b, Rootkit.Win32.TDSS.mbr, Rootkit.Boot.Wistler.a, Rootkit.Win32.ZAccess.aml,c,e,f,g,h,i,j,k, Rootkit.Boot.SST.b, Rootkit.Boot.Fisp.a, Rootkit.Boot.Nimnul.a, Rootkit.Boot.Batan.a, Rootkit.Boot.Lapka.a, Rootkit.Boot.Goodkit.a, Rootkit.Boot.Clones.a, Rootkit.Boot.Xpaj.a, Rootkit.Boot.Yurn.a, Rootkit.Boot.Prothean.a, Rootkit.Boot.Plite.a, Rootkit.Boot.Geth.a, Rootkit.Boot.CPD.b, Backdoor.Win32.Trup.a,b, Backdoor.Win32.Sinowal.knf,kmy, Backdoor.Win32.Phanta.a,b, Virus.Win32.TDSS.a,b,c,d,e, Virus.Win32.Rloader.a, Virus.Win32.Cmoser.a, Virus.Win32.Zhaba.a,b,c, Trojan-Clicker.Win32.Wistler.a,b,c, Trojan-Dropper.Boot.Niwa.a, Trojan-Ransom.Boot.Mbro.d, e, Trojan-Ransom.Boot.Siob.a, Trojan-Ransom.Boot.Mbro.f.

How to disinfect a compromised system

Download the TDSSKiller.zip archive and extract it into a folder on the infected (or possibly infected) computer with an archiver (WinZip, for example);
Run the TDSSKiller.exe file;
Wait until the scanning and disinfection completes. A reboot might require after the disinfection has been completed.

Whats New:
Updates: official site does not provide any info about changes in this version
[i][/i]Homepage