Casir, Common and Stubborn Infections Remover

Martin Brinkmann
Jul 29, 2011
Updated • Feb 22, 2014
Security, Windows software

Casir, which stands for Common and Stubborn Infections Remover, has been specifically designed by its developer to remove virus infections on a system that many regular antivirus software programs have troubles disinfecting.

These types of malware often manipulate the system to make their removal more difficult, for instance by disabling Safe Mode, preventing the installation of popular antivirus software or disabling other built-in tools like the Windows Task Manager.

When a system gets infected by nasty trojans or worms, like those of the Trojan Downloader or Win32.VB family, then it is often too late to use conventional security tools to remove it.

Casir is a click and run tool that does not require expertise or advanced tech knowledge to run. You can start the portable software from a local hard drive, removable device or even an optical disc if you want. Please note that you need elevated privileges for some of the program's functionality. The interface looks clean, and all that is really needed is to click the Start button to initiate the system scan.

Unlike other antvirus software, Casir will not scan all files on all connected drives and devices. It identifies, cleans and removes a fixed set of computer worms, trojans and other forms of malicious software.

So what exactly is Casir doing when it finds an infection or insecure system settings?

  • Can lift restrictions that have been set by malicious software.
  • Can remove processes and services added by malware.
  • Removes the same processes and scripts from the system so that they won't be started again.
  • Removes malicious autostart entries.
  • Cleans up all storage devices, including hard drives, floppy drives, removable drives and memory cards.
  • Cleans up the Windows Registry, removes keys and traces left by the malicious software.

Casir removes all detected part of malware on the system, before it starts a CDS Job. This is basically a deep scan of the system. It will scan all files, Services, Registry information and memory resident processes for malicious traces. The developers have added this scan to counter malware that tries to avoid detection by randomizing Registry keys, file names and locations. A log is generated and saved in the system folder.


A click on Targets in the application interface opens the list of malware that is currently being detected by Casir.

Casir is anice to have security software for Windows, especially since it is a portable program. It can easily be added to a tools collection on an USB stick or DVD.

The program itself is compatible with 32-bit and 64-bit editions of the Microsoft Windows operating system. It can be downloaded directly from the developer website.

Update: Please note that the Casir homepage is no longer available. While the program itself can still be downloaded from a third-party download site such as Softpedia, it needs to be noted that it may not work properly anymore as it has not been updated since 2011.

It is recommended to use other applications instead, for instance Malwarebytes Anti-Malware to scan the system, or Virus Effect Remover which comes close to the functionality that Casir offers.


Tutorials & Tips

Previous Post: «
Next Post: «


  1. jusme said on August 14, 2011 at 9:53 pm

    avast gives me a virus in this sw,, win32:pup-gen (pup) ,,, so glad it found the virus b4 i installed

    1. Martin Brinkmann said on August 14, 2011 at 9:56 pm

      That’s a false positive.

  2. Dean said on July 31, 2011 at 8:31 pm

    This is the file (Totally unmodified)

    1. Martin Brinkmann said on July 31, 2011 at 9:04 pm

      Thanks.Verified that it is the original file.

  3. tekkos said on July 31, 2011 at 5:23 pm

    I was totally unable to find the download link on the Sergiwa site.
    I tried with Firefox & Google Chrome. Am i stupid ?

    1. Dean said on July 31, 2011 at 8:26 pm

      I assume it’s just re-directing you?

      I could get the file via Chrome – just needed to click on the floppy disk icon; Opera just re-directed all the time.

  4. Dean said on July 29, 2011 at 6:42 pm

    Annoyingly this site doesn’t appear to like Opera. Kinda annoying.

    Good find though, thanks.

  5. Radrick said on July 29, 2011 at 6:19 pm

    Does this include those fake antivirus/ransomware programs?

    1. Martin Brinkmann said on July 29, 2011 at 6:29 pm

Leave a Reply

Check the box to consent to your data being stored in line with the guidelines set out in our privacy policy

We love comments and welcome thoughtful and civilized discussion. Rudeness and personal attacks will not be tolerated. Please stay on-topic.
Please note that your comment may not appear immediately after you post it.