Note that it should not be used as a substitute for running normal proactive antivirus protection, but rather as a reactive tool to handle systems that are already infected.

It will clean an infected system completely:

• kill running processes that are infected
• reveal and remove rootkits
• remove infections from disk (including ActiveX components and browser helper objects)
• restore correct registry values
• remove references created by malware in hosts file
• remove windows firewall rules for malicious programs