Malware repair tool

[Dani Santos]

After cowpipe ideia to make a tool that could scan for malware send to cloud and remove. I got an ideia to make a comunity tool that repairs the system after the infection so you don't need to reformat windows everytime someone gets infected. I can develop it but im asking help to make a list of places affected by malware and if possible how to repair.

example:
disable task manager - fix:change registry key
disable network - reset network ip with cmd command
disable uac - change registry fix
ect...

 

[soinvisage]

After cowpipe ideia to make a tool that could scan for malware send to cloud and remove. I got an ideia to make a comunity tool that repairs the system after the infection so you don't need to reformat windows everytime someone gets infected. I can develop it but im asking help to make a list of places affected by malware and if possible how to repair.

example:
disable task manager - fix:change registry key
disable network - reset network ip with cmd command
disable uac - change registry fix
ect...

like tiranium ?

 

[Dani Santos]

Yeah but community based, with more tools, standlone and portable.

 

[soinvisage]

to have a community you must have a good detection in first !

 

[Dani Santos]

to have a community you must have a good detection in first !

It's not to remove malware. It is to repair the "bad things" malware does to the system

 

[soinvisage]

Yeah but community based, with more tools, standlone and portable.

yes like that ?

 

[Mateotis]

RogueKiller is already specified for this, I also think HitmanPro does it.

 

[Dani Santos]

yes like that ?

Yap but standlone. If dubseven could make a portable version of it

 

[soinvisage]

Yap but standlone. If dubseven could make a portable version of it

yes it will be very happy to answer you

 

[Deleted member 21043]

like tiranium ?

yes it will be very happy to answer you

He wants to make a new product for his company Mysecuritywin. There is nothing wrong with that... Are you willing to join in and help him? If you aren't, please leave the thread. Thank you

 

[DaZa9]

Hello, to enable Task manager through registry you'll have to write to current user-system, example:

Regkey.RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr", 1, "REG_DWORD")

Note that this will require admin rights, with limited account this will show an error. You can also disable it by change "1" to "0".

by resetting IP address you mean you want to change it like 192.168.1.3? well this won't work on all computers because for example my IP is like 192.168.100.3 but I have idea that you can let the user insert what exactly IP he wants? or you want to fixing these like automatically without asking for user input?

About UAC all the ways to disable using .NET is patched i think.

 

[Dani Santos]

Hello, to enable Task manager through registry you'll have to write to current user-system, example:

Regkey.RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr", 1, "REG_DWORD")

Note that this will require admin rights, with limited account this will show an error. You can also disable it by change "1" to "0".

by resetting IP address you mean you want to change it like 192.168.1.3? well this won't work on all computers because for example my IP is like 192.168.100.3 but I have idea that you can let the user insert what exactly IP he wants? or you want to fixing these like automatically without asking for user input?

About UAC all the ways to disable using .NET is patched i think.

Yeah i know how to do that. I want other things that malware usally do that affects the user. That were quick examples

 

[Creator Of Manticore]

arent there enough registry fix software already??? >-<

 

[Dani Santos]

arent there enough registry fix software already??? >-<

If you read the post you would understand that this isnt a registry fix software...

 

[WinXPert]

If you read the post you would understand that this isnt a registry fix software...

but in order to enable taskman, cmd or regedit, you'll have to resort to fixing/editing the registry. I have a batch file for fixing the registry that I use after removing all infections. Sometimes I use HijackHunter or any app from tweaking.com and they are portable.

Don't get me wrong, I like the idea. It can be beneficial to noobies and maybe to advanced users who wants a quick and dirty solution.

 

[Dani Santos]

but in order to enable taskman, cmd or regedit, you'll have to resort to fixing/editing the registry. I have a batch file for fixing the registry that I use after removing all infections. Sometimes I use HijackHunter or any app from tweaking.com and they are portable.

Don't get me wrong, I like the idea. It can be beneficial to noobies and maybe to advanced users who wants a quick and dirty solution.

Ok so if it's not worth admins can close the topic