这篇文章涵盖了一些最好的免费独立恶意软件删除工具(standalone malware removal tools )，以删除特定的复杂病毒(remove specific complex virus)感染。我们介绍了一些优秀的防病毒和计算机安全公司，它们提供不同的工具来删除特定类型的恶意软件（如Trojan-Ransom.Win32.Rector、ZeroAccess、Wildfire Locker、Zeus等）、rootkit 等。
尽管已经有许多不错的免费防病毒工具(free antivirus tools)、按需防病毒扫描程序(on-demand antivirus scanners)和在线恶意软件扫描(Online Malware Scanners) 程序可以帮助您防止病毒、恶意软件、勒索软件等，但当您必须删除特定类型的恶意软件时，这些工具可能不派上用场。因此，我们创建了这个列表。
删除特定复杂病毒的恶意软件(Malware)删除工具
以下是一些知名安全公司的列表，它们提供不同的恶意软件清除工具来清除特定病毒：
- 卡巴斯基
- 迈克菲
- 无病毒谢谢
- 埃塞特。
现在让我们检查一下这些公司提供的独立工具。
1]卡巴斯基
卡巴斯基(Kaspersky)带来了 10 多种恢复和安全工具。这些都是：
- Kaspersky Anti-Ransomware Tool：此工具有助于防止Rakhi、Bad Rabbit、Petya、WannaCry、TeslaCrypt 和 Rannoh 勒索软件
- Kaspersky Virus Removal Tool：您可以使用此工具扫描和消毒您的Windows计算机
- WildfireDecryptor：此工具可以方便地解密由Wildfire Locker加密的(Wildfire Locker)WFLX文件
- TDSSKiller：它有助于检测和删除 Rootkit.Win32.TDSS 系列中的恶意软件(Rootkit.Win32.TDSS)。Rootkit.Boot.Backboot.a、Virus.Win32.Cmoser.a、Backdoor.Win32.Phanta.a 、b等很多bootkits和rootkits ，也可以用这个工具来删除
- RannohDecryptor：如果您需要解密被Trojan-Ransom.Win32.Rannoh恶意软件加密的文件，请使用此工具
- ShadeDecryptor：它可以帮助解密被Trojan-Ransom.Win32.Shade恶意软件加密的文件。可以解密具有.tyson、.no_more_ransom、.crypted000007、.break_bad(.breaking_bad)、.xtbl、.windows10、.heisenberg等扩展名的文件
- CoinVaultDecryptor：此工具可以对被(CoinVaultDecryptor:)Trojan-Ransom.MSIL.CoinVault系列恶意软件感染的计算机进行消毒
- ScraperDecryptor：让您解密被Trojan-Ransom.Win32.Scraper程序加密的文件
- XoristDecryptor： 可以通过此工具对感染了Trojan-Ransom.MSIL.Vandev或Trojan-Ransom.Win32.Xorist恶意软件的(Trojan-Ransom.Win32.Xorist)计算机进行消毒(Computer)
- ScatterDecryptor：它可以解密那些被名为(ScatterDecryptor:)Trojan-Ransom.BAT.Scatter的病毒影响或加密的文件
- RakhniDecryptor：如果文件被.kraken或.locked扩展名锁定，此工具可以帮助您解锁此类文件。它还可以帮助您解除对计算机的阻止
- RectorDecryptor：如果您的文件被Trojan-Ransom.Win32.Rector恶意软件加密，请使用此工具
- Kaspersky Rescue Disk：如果某些恶意软件锁定了您的计算机并且您无法访问它，那么这个应急磁盘工具会很有用。
您可以从support.kaspersky.com网页获取所有这些免费工具。
提示(TIP)：如果您的文件被某些勒索软件加密，那么您可以查看我们的免费勒索软件解密工具(free ransomware decryption tools)列表，这些工具可能会对您有所帮助。
2]迈克菲
McAfee提供 8 种不同的反恶意软件工具。以下是所有这些工具的列表：
- GetSusp：如果您怀疑您的计算机上存在一些未检测到的恶意软件，那么您可以尝试使用此工具并检查它是否有帮助
- Pinkslipbot 控制服务器代理检测和端口转发删除工具(Pinkslipbot Control Server Proxy Detection and Port-Forwarding Removal Tool)：如果系统较早感染了W32/Pinkslipbot ( Qakbot/QBot ) 木马，那么该系统仍有可能将恶意软件作为控制服务器代理提供服务。如果是这种情况，则可以使用此命令行工具来消除此类漏洞。除此之外，此工具还可以禁用该系统上的Pinkslipbot控制服务器代理服务（如果存在）
- FileInsight：使用此工具，您可以分析、查看和剖析可疑的下载和文件
- Stinger：它可以帮助您删除特定病毒，例如Generic trojan.kf、LNK/Downloader.ch、Ransom-LockBit、FakeAV-DZ、PS/Agent.bv、Trojan-Packed.c等
- RootkitRemover：这个独立的工具可以帮助您从(RootkitRemover:)Necurs、TDSS和ZeroAccess系列中检测和删除 rootkit
- 勒索软件拦截器：(Ransomware Interceptor:)此反勒索软件工具可以帮助您阻止某些勒索软件（如WannaCry）进行的文件加密尝试。您可以开始监控整个系统，也可以将特定文件/进程列入白名单以禁用其监控
- McAfee Ransomware Recover (Mr2)：如果您的文件被Stampado或其他一些勒索软件加密，那么这个命令行工具会很有帮助
- 隐写术分析工具：(Steganography Analysis Tool:)此在线工具可以帮助您保护可能感染恶意广告、数据泄露等的媒体流量。只需(Just)上传您的图像文件（最大 1024*768 且小于 1 MB）并检查它是否安全。
所有这些工具都可以从mcafee.com 获取(mcafee.com)。
提示：(TIP:)您还可以使用Microsoft Windows 恶意软件删除工具从您的计算机中删除特定的恶意软件。
3] NoVirus谢谢
NoVirusThanks 附带 10 多种独立工具来删除特定的恶意软件。以下是工具：
- Anti-Rootkit：此系统分析工具可以方便地检测是否存在 Rootkit 和恶意软件。它可以检测隐藏的驱动程序、进程、隐形DLL模块等
- DLL Explorer： 帮助(Helps)显示唯一和非系统DLL文件的列表
- 文件调控器：(File Governor:)可用于解除对文件和文件夹的阻止，以便您可以重命名、删除文件等
- Malware Removal：它可以检测并删除间谍软件、流氓软件、木马、扫描浏览器劫持等
- Registry DeleteEx：此工具可以删除无法直接从Windows 注册表(Windows Registry)和其他传统选项中删除的锁定注册表项和值
- 流检测器：它可以在(Stream Detector:)NTFS驱动器上找到隐藏的备用数据流(Alternate Data Streams)( ADS ) ，然后帮助您删除不需要的流和文件
- Zeus Trojan Remover：顾名思义，该工具可以删除所有已知的ZeuS银行木马变种（称为Wsnpoem或ZBot）
- 威胁杀手：(Threat Killer:)它有助于通过不同的命令删除恶意软件，例如删除注册表(Registry)项、卸载DLL、禁用服务等
- 隐藏进程查找器：有助于查找使用(Hidden Process Finder:)任务管理器(Task Manager)或其他进程管理器工具(process manager tools)无法检测到的隐藏 rootkit 或进程
- Inf Remover： 有助于(Helpful)删除附加设备（包括USB驱动器）根文件夹中可用的Autorun.inf文件（或Autorun Virus File ）
- DLL UnInjector：它可以删除恶意软件DLL(DLLs)以及从选定进程中卸载DLL(DLLs)
- Handle Tracer：在 32 位版本的Windows 操作系统上列出、搜索和操作打开的句柄很有帮助(Windows OS)
- 智能文件删除：(Smart File Delete:)用于在下次重新启动计算机时安全删除锁定的文件。
您可以在novirusthanks.org(novirusthanks.org)获取所有这些工具。
阅读(Read)：互联网安全文章和提示(Internet Security article and tips)。
4] ESET
ESET提供了大量独立工具，用于消除不同类型的威胁或恶意软件。其中一些威胁是Win32/Filecoder.AESNI.A , Win32/Codplat.AA , JS/Bondat.A , Win32/TrojanDownloader.Necurs.A , Win32/Simda.B , Android/Simplocker.A , Win32/Spy.Tuscas , Win32/Zimuse.A , Win32/Poweliks.A , Win32/Goblin.C.Gen , Win32/Filecoder.WannaCryptor等等。以下是ESET提供的独立恶意软件清除工具列表：
- Acad/Medre.A 清洁工
- AES-NI 解密器
- Adware.SuperFish 清洁剂
- 床单清洁剂
- BlueKeep 检查器
- Conficker 清洁剂
- 超级鱼清洁剂
- 孤岛危机解密器
- Crypt888解密器
- Win32/Daonol.C 渗透
- ESET Dorkbot 清洁器
- 永恒的蓝色格子
- ESET Merond.O 清洁剂
- Filecoder.NAC 清理器
- Elex 清洁剂
- GandCrab 解密器
- Win32/IRCBot 清洁器
- Filecoder.AE 清理器
- Filecoder.AR 清理器
- Mabezat解密器
- Mebroot 清洁剂
- Win32/Necurs 清理器
- Poweliks 清洁剂
- Retefe解密器
- Retacino 解密器
- Sirefef 清洁剂
- ZbotZRcleaner
- TeslaCrypt 解密器
- Trustezeb. 清洁工。
这些工具位于support.eset.com上。
希望(Hope)所有这些工具都会有所帮助。
相关(Related)： 如何从 Windows 10 中删除病毒(How to remove virus from Windows 10)。
Free Malware Removal Tools to remove Specific Virus in Windows 11/10
This post covers some best free standalone malware removal tools to remove specific complex virus infections. We have covered some good antivirus and computer security companies that provide different tools to remove specific types of malware (like Trojan-Ransom.Win32.Rector, ZeroAccess, Wildfire Locker, Zeus, etc.), rootkits, and more.
Though there are many good free antivirus tools, on-demand antivirus scanners, and Online Malware Scanners already available that can help you prevent viruses, malware, ransomware, etc., when you have to remove a specific type of malware, then such tools might not come in handy. Therefore, we have created this list.
Malware removal tools to remove specific complex virus
Here is a list of some well-known security companies that offer different malware removal tools for removing specific virus(es):
- Kaspersky
- McAfee
- NoVirusThanks
- ESET.
Now let’s check the standalone tools provided by these companies.
1] Kaspersky
Kaspersky brings 10+ recovery and security tools. These are:
- Kaspersky Anti-Ransomware Tool: This tool helps to protect from Rakhi, Bad Rabbit, Petya, WannaCry, TeslaCrypt, and Rannoh ransomware
- Kaspersky Virus Removal Tool: You can use this tool to scan and disinfect your Windows computer
- WildfireDecryptor: This tool can come in handy to decrypt WFLX files that are encrypted by Wildfire Locker
- TDSSKiller: It helps to detect and remove malware from Rootkit.Win32.TDSS family. A lot of bootkits and rootkits like Rootkit.Boot.Backboot.a, Virus.Win32.Cmoser.a, Backdoor.Win32.Phanta.a,b, etc., can also be removed using this tool
- RannohDecryptor: Use this tool if you need to decrypt files encrypted by Trojan-Ransom.Win32.Rannoh malware
- ShadeDecryptor: It can help to decrypt files that are encrypted by Trojan-Ransom.Win32.Shade malware. Files with extensions like .tyson, .no_more_ransom, .crypted000007, .breaking_bad, .xtbl, .windows10, .heisenberg, etc., can be decrypted
- CoinVaultDecryptor: This tool can disinfect a computer that was infected by the malware of Trojan-Ransom.MSIL.CoinVault family
- ScraperDecryptor: lets you decrypt files that are encrypted by Trojan-Ransom.Win32.Scraper program
- XoristDecryptor: Computer that is infected with Trojan-Ransom.MSIL.Vandev or Trojan-Ransom.Win32.Xorist malware can be disinfected via this tool
- ScatterDecryptor: It lets decrypt those files that are affected or encrypted by a virus named Trojan-Ransom.BAT.Scatter
- RakhniDecryptor: If files are locked with .kraken or .locked extensions, this tool can help you unlock such files. It can also help you unblock your computer
- RectorDecryptor: Use this tool if your files are encrypted by Trojan-Ransom.Win32.Rector malware
- Kaspersky Rescue Disk: If some malware has locked your computer and you aren’t able to access it, then this rescue disk tool can be useful.
You can get all these free tools from the support.kaspersky.com webpage.
TIP: In case your files are encrypted with some ransomware, then you can check our list of free ransomware decryption tools that might help you.
2] McAfee
McAfee provides 8 different anti-malware tools. Here is a list of all those tools:
- GetSusp: If you suspect that there is some undetected malware on your computer, then you can try this tool and check if it helps
- Pinkslipbot Control Server Proxy Detection and Port-Forwarding Removal Tool: If a system was earlier infected with W32/Pinkslipbot (Qakbot/QBot) trojan, then chances are that system still be serving the malware as a control server proxy. If that is the case, then this command-line tool can be used to remove such vulnerability. Apart from that, this tool can also disable the Pinkslipbot control server proxy service (if present) on that system
- FileInsight: Using this tool, you can analyze, view, and dissect suspicious downloads and files
- Stinger: It can help you remove specific viruses like Generic trojan.kf, LNK/Downloader.ch, Ransom-LockBit, FakeAV-DZ, PS/Agent.bv, Trojan-Packed.c, and more
- RootkitRemover: This standalone tool can help you detect and remove rootkits from Necurs, TDSS, and ZeroAccess family
- Ransomware Interceptor: This anti-ransomware tool can help you prevent file encryption attempts made by some ransomware (like WannaCry). You can start monitoring for the entire system and also whitelist specific files/processes to disable their monitoring
- McAfee Ransomware Recover (Mr2): If your files are encrypted by Stampado or some other ransomware, then this command-line tool can be helpful
- Steganography Analysis Tool: This online tool can help you protect your media traffic that can be infected with malvertising, data exfiltration, etc. Just upload your image file (up to 1024*768 and less than 1 MB) and check if it is safe.
All these tools can be grabbed from mcafee.com.
TIP: You can also use Microsoft Windows Malicious Software Removal Tool to remove specific malicious software from your computer.
3] NoVirusThanks
NoVirusThanks comes with more than 10 standalone tools to remove specific malware. Here are the tools:
- Anti-Rootkit: This system analysis tool is handy to detect the presence of rootkits and malware present. It can detect hidden drivers, processes, stealth DLL modules, etc
- DLL Explorer: Helps to display the list of unique and non-system DLL files
- File Governor: It can be used to unblock files and folders so that you can rename, delete files, etc
- Malware Removal: It can detect and then remove spyware, rogue software, trojans, scan for browser hijacks, etc
- Registry DeleteEx: This tool can remove locked registry keys and values that can’t be deleted directly from Windows Registry and other traditional options
- Stream Detector: It can find hidden Alternate Data Streams (ADS) on NTFS drives and then helps you delete unwanted streams and files
- Zeus Trojan Remover: As its name indicates, this tool can delete all known variants of ZeuS banking trojan (known as Wsnpoem or ZBot)
- Threat Killer: It helps to remove malware via different commands such as delete the Registry key, unload DLL, disable service, etc
- Hidden Process Finder: It is helpful in finding hidden rootkits or processes that can’t be detected using Task Manager or other process manager tools
- Inf Remover: Helpful to delete Autorun.inf file (or Autorun Virus File) available in the root folder of attached devices (including USB drives)
- DLL UnInjector: It can remove malware DLLs as well as unload DLLs from a selected process
- Handle Tracer: It is helpful to list as well as search and manipulate open handles on 32-bit editions of Windows OS
- Smart File Delete: for safely deleting locked files on the next reboot of your computer.
You can grab all these tools at novirusthanks.org.
Read: Internet Security article and tips.
4] ESET
Plenty of standalone tools are provided by ESET for removing different types of threats or malware. Some of those threats are Win32/Filecoder.AESNI.A, Win32/Codplat.AA, JS/Bondat.A, Win32/TrojanDownloader.Necurs.A, Win32/Simda.B, Android/Simplocker.A, Win32/Spy.Tuscas, Win32/Zimuse.A, Win32/Poweliks.A, Win32/Goblin.C.Gen, Win32/Filecoder.WannaCryptor, and more. Here is the list of the standalone malware removal tools provided by ESET:
- Acad/Medre.A cleaner
- AES-NI decryptor
- Adware.SuperFish cleaner
- Bedep cleaner
- BlueKeep checker
- Conficker cleaner
- Superfish cleaner
- Crysis decryptor
- Crypt888 decrypter
- Win32/Daonol.C infiltration
- ESET Dorkbot cleaner
- Eternal Blue checker
- ESET Merond.O cleaner
- Filecoder.NAC cleaner
- Elex cleaner
- GandCrab decryptor
- Win32/IRCBot cleaner
- Filecoder.AE cleaner
- Filecoder.AR cleaner
- Mabezat decryptor
- Mebroot cleaner
- Win32/Necurs cleaner
- Poweliks cleaner
- Retefe decryptor
- Retacino decrypter
- Sirefef cleaner
- ZbotZRcleaner
- TeslaCrypt decrypter
- Trustezeb.A cleaner.
These tools are present at support.eset.com.
Hope all these tools will be helpful.
Related: How to remove virus from Windows 10.
