Free Tools

* F-Secure Anti-Virus™ for DOS
Download the free F-Secure Anti-Virus for DOS (free for home use) by anonymous FTP from our FTP site.
Only the DOS version of F-Secure Anti-Virus is free. The other versions are either for 30 days-evaluation or commercial ones.

Note: F-Secure Anti-Virus limited free version comes packaged in a zip file. Zip files are compressed in size and put into one package in order to facilitate easy transmission over the internet. The shareware utility to pack and unpack zip files is available for download at http://www.pkware.com/.If you're using WinZip, turn off the 'Wizard Mode' before continuing.

* Virus removal and other tools available from F-Secure Corporation.

F-Secure provides a number of virus removal and system fixing tools from its ftp site. Virus removal tools are used separately from F-Secure Anti-Virus and provide cleaning of a specific infection. Fixing tools perform repair of a system damaged or modified by a specific malicious program. Most of the tools have additional readme files that should be studied before usage.

If you are fetching a virus removal tool, please refer to F-Secure Virus Info Center for a complete information how to use the tool.

Tools are available here in alphabetical order: Please select the toolAntiFunAntiSircAuditBoo32BT_B_DisCoolNoteF-CIHF-HareF-IntCeF-MemF-ShellF-SpanF-TentF-TricklF-ViceFix-AulaFixBootFixPe_and_FixPe2FsKlez_or_F-KlezFsNimda_or_F-NimdaGetMacGetBootGetMBR_and_PutMBRGokarDisKirayDisKlezToolMagb_Dis_or_DisinfMatrix_DMTXDisinMultiComNavidDisPPDisinfQazDisinS7DisinfShellFixSirc_DisStagesW9x AntiFun The AntiFun tool is used to protect a system from Funlove infection coming over a network. The AntiFun tool will prevent the FunLove virus from creating the dropper executable to System directory. It will not prevent any other files on the system from being infected. Download: ftp://ftp.f-secure.com/anti-virus/tools/antifun.zip Readme: ftp://ftp.f-secure.com/anti-virus/tools/antifun.txt AntiSirc The purpose of the tool is to help the removal of the Sircam worm. The removal process is rather complex and assumes deletion of multiple copies of the worm and modification of several registry keys. Download: ftp://ftp.f-secure.com/anti-virus/tools/antisirc.exe Readme: ftp.f-secure.com/anti-virus/tools/antisirc.txt Audit FSAV Audit is a tool for network administrators, for generating reports of F-Secure Anti-Virus deployment in network. The tool will generate a report file, showing for each computer whether FSAV is installed, and certain properties of installed FSAV, like the product's version, whether Gatekeeper is activated, and virus signature database dates. Download: ftp://ftp.f-secure.com/anti-virus/tools/audit.zip Readme: ftp://ftp.f-secure.com/anti-virus/tools/audit.htm Boo32 Boo32 is a simple boot sector read/write utility. Run it without parameters to get help on command line options. Download: ftp://ftp.f-secure.com/anti-virus/tools/boo32.zip BT_B_Dis The BT_B_Dis tool is used to unlock Badtrans.b worm file, so it could be deleted after system restart. Download: ftp://ftp.f-secure.com/anti-virus/tools/bt_b_dis.reg Download: ftp://ftp.f-secure.com/anti-virus/tools/bt_b_dis.zip CoolNote CoolNote tool fixes the payload of CoolNot worm that disables Windows desktop. Download: ftp://ftp.f-secure.com/anti-virus/tools/coolnote.zip Download: ftp://ftp.f-secure.com/anti-virus/tools/coolnote.reg F-CIH F-CIH tool is used to check if a computer is infected with CIH virus. The tool terminates CIH virus process. Then a system should be cleaned with F-Secure Anti-Virus. Download: ftp://ftp.f-secure.com/anti-virus/tools/f-cih.exe F-Hare F-HARE will detect and disinfect the three known variants of the Hare virus (also known as HDEuthanasia and Krsna). Download: ftp://ftp.f-secure.com/anti-virus/tools/f-hare15.zip F-IntCe F-IntCe tool detects and disinfects the tricky INT_CE boot virus. Download: ftp://ftp.f-secure.com/anti-virus/tools/f-intce.zip F-Mem F-MEM tool will detect the Memorial virus (also known as Clint). Download: ftp://ftp.f-secure.com/anti-virus/tools/f-mem10.zip F-Shell F-SHELL tool will detect and disinfect the Shell.10634 Windows virus (also known as Tentacle_II). Download: ftp://ftp.f-secure.com/anti-virus/tools/f-shell.zip F-Span F-SPAN tool will detect and disinfect the Spanska.4250 virus also known as Elvira). Download: ftp://ftp.f-secure.com/anti-virus/tools/f-span13.zip F-Tent F-TENT tool will detect and disinfect the Tentacle.1958 Windows virus. Download: ftp://ftp.f-secure.com/anti-virus/tools/f-tent10.zip F-Trickl F-TRICKL tool will detect and disinfect the Tentatrickle virus. Download: ftp://ftp.f-secure.com/anti-virus/tools/f-trickl.zip F-Vice F-Vice tool will detect and disinfect the polymorphic Vice virus. Download: ftp://ftp.f-secure.com/anti-virus/tools/f-vice14.zip Fix-Aula Fix-Aula is a tool to repair a system configuration damaged by Aula trojan. Download: ftp://ftp.f-secure.com/anti-virus/tools/fix_aula.reg Download: ftp://ftp.f-secure.com/anti-virus/tools/fix_aula.zip FixBoot FixBoot is a small utility that overwrites a boot sector of a diskette with a standard boot code thus elimitating any diskette boot sector infection. Download: ftp://ftp.f-secure.com/anti-virus/tools/fixboot.zip FixPe and FixPe2 FixPe and FixPe2 utilities allow to fix false alarms of F-Prot engine on certain files that have inaccurate section information resulted from virus infection or inaccurate compression. Download: ftp://ftp.f-secure.com/anti-virus/tools/fixpe.zip Download: ftp://ftp.f-secure.com/anti-virus/tools/fixpe2.zip FsKlez or F-Klez F-Klez is a utility that disinfects a computer infected with Klez worm and Elkern virus that the worm drops. To remove Klez.E, Klez.F and Klez.H worms please use the KlezTool utility below. Download: ftp://ftp.f-secure.com/anti-virus/tools/fsklez.exe Readme: ftp://ftp.f-secure.com/anti-virus/tools/fsklez.txt FsNimda or F-Nimda F-Nimda is a utility that disinfects a computer infected with Nimda virus-worm and eliminates security holes that Nimda creates in a system. Download: ftp://ftp.f-secure.com/anti-virus/tools/fsnimda3.exe Download: ftp://ftp.f-secure.com/anti-virus/tools/fsnimda3.jar Readme: ftp://ftp.f-secure.com/anti-virus/tools/fsnimda3.txt Description: Nimda-virus worm Note: If you have problems running the above mentioned FsNimda tool, you can download a different version from here: Download: ftp://ftp.f-secure.com/anti-virus/tools/fsnimda.exe Download: ftp://ftp.f-secure.com/anti-virus/tools/fsnimda.txt GetMac GetMac tool is used to separately update FSMacro.def definition file. Note that FsMacro.def definition file is now included into all update packages available from F-Secure. Download: ftp://ftp.f-secure.com/anti-virus/tools/getmac11.zip Download: ftp://ftp.f-secure.com/anti-virus/tools/getmac12.zip Download: ftp://ftp.f-secure.com/anti-virus/tools/getmac13.zip GetBoot Getboot is a number of utilities to copy the contents of boot sectors to a file. The getboot.bat is a batch file to save a floppy boot sector to a file, the gethboot.bat is a batch file to save a hard drive boot sector to a file and the getmbr.bat is batch file to save a hard drive MBR to a file. Download: ftp://ftp.f-secure.com/anti-virus/tools/bat/getboot.bat Download: ftp://ftp.f-secure.com/anti-virus/tools/bat/gethboot.bat Download: ftp://ftp.f-secure.com/anti-virus/tools/bat/getmbr.bat Readme: ftp://ftp.f-secure.com/anti-virus/tools/bat/readme.txt GetMBR and PutMBR GetMBR and PutMBR are small utilities to take a sample of an infected machines main boot record. Get_mbr copies the mbr to a file mbr.dat and put_mbr copies the file to the mbr area. Download: ftp://ftp.f-secure.com/anti-virus/tools/getmbr.zip GokarDis The GokarDis tool disables Gokar worm autostart key. Download and run this REG file, restart your system and delete KAREN.EXE file in your Windows directory either manually or with F-Secure Anti-Virus. Download: ftp://ftp.f-secure.com/anti-virus/tools/gokardis.reg Download: ftp://ftp.f-secure.com/anti-virus/tools/gokardis.zip KirayDis KirayDis is a tool to disinfect Kiray worm and to undo changes it does to system configuration. Download: ftp://ftp.f-secure.com/anti-virus/tools/kiraydis.reg Download: ftp://ftp.f-secure.com/anti-virus/tools/kiraydis.zip KlezTool The KlezTool is a utility created by Kaspersky Labs to eliminate Klez.E, .F and .H standalone worm component and to disinfect files infected by Klez.E, .F and .H virus component. The utility should be used together with F-Secure Anti-Virus as this tool doesn't disinfect Elkern virus, that Klez.E, .F and .H worm variants drop. Please check the Readme file for step-by-step instructions. Download: ftp://ftp.f-secure.com/anti-virus/tools/kleztool.txt Download: ftp://ftp.f-secure.com/anti-virus/tools/kleztool.zip Magb_Dis or Disinf Magb_Dis tool is used to 'help' APV engine in F-Secure Anti-Virus to disinfect large files encrypted by Magistr.b virus-worm. The Disinf.exe utility creates DISINF.INI file that contains computer name and it is used by AVP engine to disinfect files encrypted by Magistr.b. Download: ftp://ftp.f-secure.com/anti-virus/tools/magb_dis.zip Readme: ftp://ftp.f-secure.com/anti-virus/tools/magb_dis.txt Matrix_D Matrix_D is a tool that fixes a payload of Matrix virus that doesn's allow to restart a system after infection. Download: ftp://ftp.f-secure.com/anti-virus/tools/matrix_d.reg Download: ftp://ftp.f-secure.com/anti-virus/tools/matrix_d.zip MTXDisin MTXDisin tool removes autostarting key of MTX virus-worm dropper and after system restart the worm's dropper file will not be locked and could be deleted. Download: ftp://ftp.f-secure.com/anti-virus/tools/mtxdisin.reg Download: ftp://ftp.f-secure.com/anti-virus/tools/mtxdisin.zip MultiCom MultiComm is a utility for enabling multiple communication directories to be used with F-PROT for Windows (FPW). Download: ftp://ftp.f-secure.com/anti-virus/tools/multicom.zip NavidDis NavidDis is a tool to remove autostarting key of Navidad worm and to fix EXE file startup key in the Registry. Download: ftp://ftp.f-secure.com/anti-virus/tools/naviddis.reg Download: ftp://ftp.f-secure.com/anti-virus/tools/naviddis.zip PPDisinf PPDisinf is a tool to disinfect PrettyPark worm and to fix EXE file startup key in the Registry. Download: ftp://ftp.f-secure.com/anti-virus/tools/ppdisinf.reg Download: ftp://ftp.f-secure.com/anti-virus/tools/ppdisinf.zip QazDisin QazDisin is a tool to remove QAZ work autostarting key from the Registry. This way the worm will be disinfected. Download: ftp://ftp.f-secure.com/anti-virus/tools/qazdisin.reg Download: ftp://ftp.f-secure.com/anti-virus/tools/qazdisin.zip S7Disinf S7Disinf is a tool to remove Sub7 backdoor's autolauncher from EXE file startup key. The autolauncher is used to run SubSeven backdoor every time an EXE file starts. The backdoor itself is to be removed with F-Secure Anti-Virus. Download: ftp://ftp.f-secure.com/anti-virus/tools/s7disinf.reg Download: ftp://ftp.f-secure.com/anti-virus/tools/s7disinf.zip ShellFix The ShellFix tool is used to fix Explorer startup problems resulted from unconditional termination of F-Nimda tool during its operation. If F-Nimda tool is terminated by a user or operating system while it is scanning a hard disk, there will be no icons and no taskbar on Windows desktop. To fix the problem you will have to run the SHELLFIX.REG file. Download: ftp://ftp.f-secure.com/anti-virus/tools/shellfix.reg Download: ftp://ftp.f-secure.com/anti-virus/tools/shellfix.zip Readme: ftp://ftp.f-secure.com/anti-virus/tools/shellfix.txt Sirc_Dis Sirc_Dis utility is used to remove autostarting key of Sircam worm and to fix EXE file startup key in the Registry. Download: ftp://ftp.f-secure.com/anti-virus/tools/sirc_dis.reg Download: ftp://ftp.f-secure.com/anti-virus/tools/sirc_dis.zip StagesW9x StagesW9x is a tool is used to remove Stages worm autostartup key from the Registry and to undo other Registry changes done by the worm. Download: ftp://ftp.f-secure.com/anti-virus/tools/stagesw9x.reg Download: ftp://ftp.f-secure.com/anti-virus/tools/stagesw9x.zip * Videos The first video, titled "F-Secure Horror Show" illustrates the security threat landscape and common security threats. The second video titled "Virus Summary 2001" is a comprehensive round-up of the virus incidents in 2001. Both of the videos feature Mikko Hyppönen, head of anti-virus research at F-Secure. The video clips are available in 4 different formats and in English language. F-Secure Horror Show: Virus summary 2001: QuickTime (50.7Mb) Windows Media Player (50.5Mb) RealPlayer (15.1Mb) QuickTime (48.6Mb) Windows Media Player (47.8Mb) RealPlayer (14.2Mb) Note: Due to the size of the files, we recommend using a high-speed connection line.