Malware Domain List

Malware Related => Tools of the trade / Internet News => Topic started by: SysAdMini on January 15, 2010, 02:06:31 pm

Title: Norman TDSS/TDL3 cleaning tool
Post by: SysAdMini on January 15, 2010, 02:06:31 pm
Antivirus vendor Norman made a cleaning solution for TDSS/TDL3 available.
It currently  supports TDL3 only, but not earlier versions.

http://download.norman.no/public/Norman_TDSS_Cleaner.exe
Title: Re: Norman TDSS/TDL3 cleaning tool
Post by: himfack on January 15, 2010, 09:54:10 pm
Not detect the current version (3.23).
Title: Re: Norman TDSS/TDL3 cleaning tool
Post by: SysAdMini on January 15, 2010, 09:56:13 pm
Quote from: himfack on January 15, 2010, 09:54:10 pm
Not detect the current version (3.23).

Can you send me a sample of v3.23 ?
Title: Re: Norman TDSS/TDL3 cleaning tool
Post by: himfack on January 16, 2010, 10:45:05 am
Quote from: SysAdMini on January 15, 2010, 09:56:13 pm
Can you send me a sample of v3.23 ?
Check your personal message.
Title: Re: Norman TDSS/TDL3 cleaning tool
Post by: SysAdMini on January 16, 2010, 11:50:23 am
Quote from: himfack on January 16, 2010, 10:45:05 am
Quote from: SysAdMini on January 15, 2010, 09:56:13 pm
Can you send me a sample of v3.23 ?
Check your personal message.

Thanks.
Title: Re: Norman TDSS/TDL3 cleaning tool
Post by: lars on January 16, 2010, 06:15:57 pm
Quote from: himfack on January 15, 2010, 09:54:10 pm
Not detect the current version (3.23).

I just did a test with the sample 618d3a86c84478eb21d86a18ee218be2,
and Norman TDSS Cleaner detects and cleans it just fine.

My test system is XP SP3. Can you verify your findings or report what system you're running?

Thanks for your feedback.
Title: Re: Norman TDSS/TDL3 cleaning tool
Post by: himfack on January 17, 2010, 04:07:47 pm
Quote from: lars on January 16, 2010, 06:15:57 pm
I just did a test with the sample 618d3a86c84478eb21d86a18ee218be2,
and Norman TDSS Cleaner detects and cleans it just fine.

My test system is XP SP3. Can you verify your findings or report what system you're running?

Thanks for your feedback.
I did a test and Norman TDSS Cleaner is not found older variants of this rootkit (both 3.17 and the first variants). OS - XP SP2
Title: Re: Norman TDSS/TDL3 cleaning tool
Post by: lars on January 18, 2010, 11:59:37 am
Ok,

Can you share the sample please?

Thanks for testing  ;)
Title: Re: Norman TDSS/TDL3 cleaning tool
Post by: himfack on January 18, 2010, 12:38:15 pm
Quote from: lars on January 18, 2010, 11:59:37 am
Ok,

Can you share the sample please?

Thanks for testing  ;)
http://www.malwaredomainlist.com/mdl.php?search=tdss&colsearch=All&quantity=50
look here :)

p.s.
currently tdsskiller is the only utility who can detect and remove this active malware.
Title: Re: Norman TDSS/TDL3 cleaning tool
Post by: SysAdMini on January 29, 2010, 02:54:29 pm
A new version is available for download.