Swandog46s Public Anti-Malware Tools
Rated • 1 review • activism, security freeware • geekstogo.com
Avenger. A souped up diagnosis tool for experts. Similar to Hijackthis! but more advanced. It can run a rootkit scan, but it's main purpose is to run a script for removal created by an expert.

"The Avenger is a fully-scriptable, kernel-level Windows driver designed to remove highly persistent files, registry keys/values, and other drivers protected by entrenched malware.
* Malicious software ("malware") often hooks deeply into the Windows operating system to hide itself from view and frustrate attempts at removal. With the recent proliferation of rootkits and other strongly-protected forms of malware, this has become more and more common.
* The Avenger is effective at removing these files and drivers which would otherwise be hard to remove because they are protected or "in use" by malicious software hooked deeply into the operating system itself.
System Requirements
* The Avenger is fully compatible with 32-bit Windows Vista, XP, and 2000. Please do not attempt to use it on any other operating system. There are no plans to build a 64-bit version of The Avenger because of Microsoft's decision to require digital signatures for 64-bit Vista kernel code.
* The Avenger must be run from a user account with administrator privileges. In Windows Vista, you will be prompted explicitly to grant The Avenger administrator privileges when it is run."
What's New in v2
A new GUI, completely rewritten from scratch. Hopefully simpler, prettier, and more intuitive.
Automatic rootkit detection and removal: check the "Scan for Rootkits" box and The Avenger will scan for rootkit drivers hidden from the operating system. The Avenger can also disable any hidden drivers found automatically.
New functionality for driver operations: a "Drivers to disable:" command as well as a safer, more robust implementation of "Drivers to delete:" (formerly "Drivers to unload:").
Full compatibility with Windows Vista.
Cleaner error handling and logging. All relevant data logged to c:avenger.txt (if c: is the system drive).
Backups are now password-protected with industry-standard password "infected" to prevent accidental reinfection.
HKEY_USERS (HKU) no longer accessible to registry routines. The Avenger loads before it is c

"The Avenger is a fully-scriptable, kernel-level Windows driver designed to remove highly persistent files, registry keys/values, and other drivers protected by entrenched malware.
* Malicious software ("malware") often hooks deeply into the Windows operating system to hide itself from view and frustrate attempts at removal. With the recent proliferation of rootkits and other strongly-protected forms of malware, this has become more and more common.
* The Avenger is effective at removing these files and drivers which would otherwise be hard to remove because they are protected or "in use" by malicious software hooked deeply into the operating system itself.
System Requirements
* The Avenger is fully compatible with 32-bit Windows Vista, XP, and 2000. Please do not attempt to use it on any other operating system. There are no plans to build a 64-bit version of The Avenger because of Microsoft's decision to require digital signatures for 64-bit Vista kernel code.
* The Avenger must be run from a user account with administrator privileges. In Windows Vista, you will be prompted explicitly to grant The Avenger administrator privileges when it is run."
What's New in v2
A new GUI, completely rewritten from scratch. Hopefully simpler, prettier, and more intuitive.
Automatic rootkit detection and removal: check the "Scan for Rootkits" box and The Avenger will scan for rootkit drivers hidden from the operating system. The Avenger can also disable any hidden drivers found automatically.
New functionality for driver operations: a "Drivers to disable:" command as well as a safer, more robust implementation of "Drivers to delete:" (formerly "Drivers to unload:").
Full compatibility with Windows Vista.
Cleaner error handling and logging. All relevant data logged to c:avenger.txt (if c: is the system drive).
Backups are now password-protected with industry-standard password "infected" to prevent accidental reinfection.
HKEY_USERS (HKU) no longer accessible to registry routines. The Avenger loads before it is c

