Goodwill Security Tools:

Recently, we noticed a significant increase in Scareware being downloaded due to malware authors using a technique called Search Engine Optimization (SEO) Poisoning.  The problem occurs when a user types in a hot topic term into Google (or another search engine) and clicks on a link that they believe to be legitimate.  However, instead of getting the desired webpage, the user will be redirected to a different site.  The redirected sites often times point to a malicious website that automatically downloads malware on to the unknowing users system. In an effort to help customers and non-customers alike, Thirtyseven4 has felt a calling to assist the public and has decided to create dedicated stand-alone removal tools to deal with the website redirection issue and other issues possibly related to the cybercriminals tactics.  Thirtyseven4 Antivirus users have built-in protection against such threats

Tool:  RemoveZAccess.



Version: 2.0.0.0
Type:  Free
Download location:  Click here

The RemoveZAcess tool will scan the drivers folder for any malicious "sys" files that can cause the website redirection issue. If a .sys file is infected, the tool will clean the infection properly.  In the event there are multiple "sys" files infected, the tool will detect all the infections in each malicious "sys" file one by one and will restart the system to properly clean it.  The process will repeat itself until all the “sys” files are cleaned.

The tool will generate a log file on the root drive of the system with the name "RemoveZAccess1.9.log".

In the case where the tool is unable to run in normal mode, we suggest that you boot the system with any other bootable CD, like Windows XP Live, and run the tool.

Please perform the steps above and check whether the website redirection problem is solved. If not, please provide us the "RemoveZAccess1.9.log" and any other observations for further analysis. Our virus research team will review the log and if necessary make any needed adjusts or enhancements to the tool.

Please email the log and any other questions or concerns to support@thirtyseven4.com.  Please also feel free to email us any feedback after using this tool.  Your feedback is appreciated and may help others.


Tool:  Rogueware Remover



Version:   1.0.0.3
Type:  Free
Download location:  Click here

The Thirtyseven4 Rogueware Remover tool has been created to assist users with removing installed Rogueware. The tool has enhanced generic detections to quickly identify known and unknown malware.


Tool:  Remfakealert



Version:   1.0.0.3
Type:  Free
Download location:  Click here

The Remfakealert tool will scan a system for Scareware (ie. Internet Security 2011, System Restore) related infections.  If an infection is detected, the tool will properly clean the system, including restoring system functionality and restoring modified registry settings.  Users who suspect they may have fallen victim to a Scareware related attack may notice Fake Security Application Alerts, Messages, Scans, etc.

This tool is being updated routinely for the latest threats and Scareware, however, if you feel your infection is not getting properly detected, please email your questions or concerns so support@thirtyseven4.com.  Our virus research team will review your email and contact you with further instructions. Please also feel free to email us any feedback after using this tool.  Your feedback is appreciated and may help others.



Tool:  Bootkitrm



Version:   1.0.0.3
Type:  Free
Download location:  Click here

The Bootkitrm tool has been created to detect the presence of TDS/TDL4 infected MBR.  If detected, the tool will allow for proper cleaning

Click here for Helpful Tips and Procedures to Keep Yourself Safe this Holiday Season