Anti-Malware Engineering Team

This blog provides information about what's happening in the anti-malware technology team at Microsoft. We're the team that builds the core antivirus, antispyware, anti-rootkit, and related technology, which is then used across a number of Microsof


December Update for Windows Malicious Software Removal Tool Released

  • Comments 1
  • Likes

Yesterday we released this month's update of the Windows Malicious Software Removal Tool. This update includes three new malware families: F4IRootkit, Ryknos, and IRCBot. This tool now cleans over 50 of the most prevalent malware families.

This release, as in the past, is available as an interactive web-based cleaner, as a downloadable executable, as well as through Windows Update, Microsoft Update, and Windows Server Update Services.

With the inclusion of rootkit cleaning of the F4IRootkit in this release, we now have cleaning in all our tools: Windows AntiSpyware beta, Windows OneCare Live beta, Windows Live Safety Center beta, and now the Windows Malicious Software Removal Tool.

In addition to adding new malware families to the tool each month, we also make sure that families we already include are updated with signatures for new variants of that family. In particular, I'll call out that we've included cleaning of the Sober.Z email worm (also known by it's Common Malware Enumeration (CME) ID, CME-681), as well as many other variants of Sober that have been released in the last month. As a note, we had signatures of this variant of Sober on Windows Live Safety Center beta and in the Windows OneCare beta since November 22. If you haven't tried these two cool technologies, please give them a try!

Thanks for your interest,

Jason Garms
Architect & Group PM
Anti-Malware Technology Team
Microsoft Corporation

Team Blog:

  • Great news. I've been using Windows AntiSpyware Beta since Microsoft first released it. And I've used OneCare since you guys released it to the public for beta testing. I must say, The Live Safety Center is truly excellent and it's good to know your working on all of these products.

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment