IMPROVED: log output is now completely streamlined and cleaned IMPROVED: log output (should be final now)ĬHANGED: Panda USB vaccine download (now on BleepingComputer) IMPROVED: autorun.inf vaccination on NTFS formatted drives (option B) IMPROVED: detection of certain autorun/VBS wormsĪDDED: detection of malicious scheduled tasks (option A)ĪDDED: malware detected on USB now copied to quarantine (option B)ĪDDED: usage information on top of the toolįIXED: issue launching download of Panda USB Vaccine (option C) IMPROVED: detection of malicious scheduled tasks (option A) SHA1: 7fef4a43f70262710127051778e0a50ec7a94e64įIXED: issue when executing from drive other than system drive (option A) Any other malware that abuses the WSH (Windows Script Host).Any other VBS (VBScript) or VBE malware.You can use this to remedy the following malware: Accidentally used an option and want to exit the script? Use CTRL + C to stop it.
When the tool is running, do not use the machine for anything else.A logfile will open automatically, but is also created by default on the C:\ drive. I advise to end the script with Q as to ensure proper logfile closing.With option D you have the possibility to disable or re-enable the Windows Script Host (WSH), to prevent any malware abusing it.With option C you can download Panda USB Vaccine to prevent any oth er a utorun malware entering your computer.This option will eradicate any related malware on the USB drive, as well as unhide your files (make them visible again). So if you have a USB drive named G:\, you should only type G ! When you use option B, be sure to type only the letter of your USB drive!.(for example it will re-enable Task Manager should it be disabled). It will also fix any registry changes made by the malware. Using option A, the tool will attempt to clean the infection.Security Tool Spotlight: Rem-VBSworm (Deutsch) Instructions in other languages are also available, namely Dutch, French , German and Polish: These steps, perfo rm a full scan with your installed antivirus product or perform an online scan. Plug in your infected USB (if any) and choose A (wait), then B (wait) and afterwards C. You should run the script in the following sequence, at least on a normal machine:
0 kommentar(er)
