Page 1 of 2

Kaspersky TDSSKiller

Posted: Fri Nov 01, 2013 6:29 pm
by I am Baas

Re: Kaspersky TDSSKiller

Posted: Thu Mar 19, 2015 4:23 am
by Midas
TDSSKiller v3.0.0.44 released (no changelog; see http://support.kaspersky.com/viruses/disinfection/5350 for info).

http://support.kaspersky.com/viruses/utility wrote:If you have detected any rootkits on your computer, then use a special TDSSKiller utility. A rootkit is a program or a program kit that hides the presence of malware in the system.

Kaspersky Virus Removal Tool 2015 also available at http://www.kaspersky.com/antivirus-removal-tool (see http://support.kaspersky.com/viruses/kvrt2015 for info).

http://support.kaspersky.com/viruses/utility wrote:If you suspect that your computer is infected with malware, then use Kaspersky virus Removal Tool 2015. Kaspersky Virus Removal Tool 2015 is designed to scan and disinfect an infected computer from viruses and other types of malicious programs.

Other Kaspersky free tools at http://www.kaspersky.com/free-tools...

Re: Kaspersky TDSSKiller

Posted: Thu Mar 19, 2015 11:31 pm
by joby_toss
And how to manually update your Kaspersky Virus Removal Tool definitions file:
https://www.raymond.cc/blog/manually-up ... databases/

Re: Kaspersky TDSSKiller

Posted: Fri Mar 20, 2015 3:45 am
by Midas
joby_toss wrote:And how to manually update your Kaspersky Virus Removal Tool definitions file:
http://www.raymond.cc/blog/manually-upd ... databases/
And thanks for that useful info, joby. 8)

Re: Kaspersky TDSSKiller

Posted: Fri Mar 20, 2015 5:07 am
by I am Baas
joby_toss wrote:And how to manually update your Kaspersky Virus Removal Tool definitions file:
https://www.raymond.cc/blog/manually-up ... databases/
Thanks joby_toss

Did you try version 2015? Raymond's instructions do not seem to work, at least not for me.

Re: Kaspersky TDSSKiller

Posted: Fri Mar 20, 2015 1:14 pm
by joby_toss
Sorry... to busy crying... just resigned my job today...

Re: Kaspersky TDSSKiller

Posted: Fri Mar 20, 2015 1:58 pm
by Midas
What!... :shock:

I'm really sorry for that. Hang in there. :!:

Re: Kaspersky TDSSKiller

Posted: Fri Mar 20, 2015 5:22 pm
by __philippe
I am Baas wrote:Did you try version 2015? Raymond's instructions do not seem to work, at least not for me.
Raymond's original instructions about KVRT manual update are a few months old by now;
in the comments section following the article, one of Raymond's readers recently noted:
(Kirby Lester 4 - weeks ago )
From what I can tell, the FTP sites have been removed and replaced with easily accessible active web HTTP directories.
The old version of KVRT can no longer be updated, however; there is a newer and more simplified version available now:

https://kaspersky.com/antivirus-removal-tool?form=1
__philippe

Re: Kaspersky TDSSKiller

Posted: Fri Mar 20, 2015 8:15 pm
by I am Baas
joby_toss wrote:Sorry... to busy crying... just resigned my job today...
Very sorry to hear about this upset, joby_toss. Be strong.

Re: Kaspersky TDSSKiller

Posted: Fri Mar 20, 2015 8:17 pm
by I am Baas
__philippe wrote:
I am Baas wrote:Did you try version 2015? Raymond's instructions do not seem to work, at least not for me.
Raymond's original instructions about KVRT manual update are a few months old by now;
in the comments section following the article, one of Raymond's readers recently noted:
(Kirby Lester 4 - weeks ago )
From what I can tell, the FTP sites have been removed and replaced with easily accessible active web HTTP directories.
The old version of KVRT can no longer be updated, however; there is a newer and more simplified version available now:

https://kaspersky.com/antivirus-removal-tool?form=1
__philippe
Thanks for that, __philippe.

Re: Kaspersky TDSSKiller

Posted: Sat Jan 02, 2016 5:08 am
by Midas
Recent review of Kaspersky Virus Removal Tool from Ghacks.net:
One user comment there explains the difference between the two freeware anti-malware tools by Kaspersky:
http://www.ghacks.net/2015/12/29/kaspersky-virus-removal-tool-review/#comment-3770785 wrote:TDSSKiller is a tool to kill specific rootkits [...]. [K]VRT is a full-blown on-demand scanner with latest KAV bases for all kinds of infections.

Re: Kaspersky TDSSKiller

Posted: Mon Jan 04, 2016 12:34 am
by joby_toss
KVRT 15.0.19.0 uses system's Temp folder to "unpack", doesn't write (application specific keys) to the Registry, but creates KVRT_Data folder in your system's drive root (usually C:\) for license and report files. You can avoid the latter by launching the app using the -d "." parameter (as ghacks author wrote), which also allows you to save (in app's folder) and access the Reports later on (they are saved in encrypted form and you will need the app to read them).
So I think this one is definitely Portable.

I haven't tried to update the virus signatures database yet, but the website states:
If the databases are out of date, Kaspersky Virus Removal Tool will display the message "This version is obsolete".

To update Kaspersky Virus Removal Tool 2015, click the Update now link and download a newer version of the utility.
Image

Re: Kaspersky TDSSKiller

Posted: Mon Jan 04, 2016 2:03 am
by I am Baas
@joby_toss

Thank you for the heads up on the command line argument.

Re: Kaspersky TDSSKiller

Posted: Mon Jan 04, 2016 2:31 am
by I am Baas
@joby_toss
Does it properly unload the driver after exit?

Re: Kaspersky TDSSKiller

Posted: Mon Jan 04, 2016 3:11 am
by joby_toss
I think so, I couldn't find any traces of that after the app was closed. Anyway, Kaspersky states that:
If any problems occurred during the work of Kaspersky Virus Removal Tool 2015, temporary files will be removed after the computer is restarted.
The drivers are unloaded after the system restart.
P.S. I could, however, find a driver (cleanhlp64.sys) that belongs to Emsisoft and wasn't unloaded after Emsisoft Emergency Kit was closed... :( Would appreciate a confirmation on that!