Iran's Computer Emergency Response Team (CCCERT) has released to SC a removal tool designed to detect and remove the Flame worm described as "the most sophisticated cyber weapon yet unleashed".
The worm was detected attacking nations in the Middle East. The specific industries it targeted were unknown.
Users download and run the tool at their own risk.
CCERT said the Windows removal tool should be run as administrator in safe mode after which it generates three zip files. It will pull infected files and logs.
The CERT said yesterday the malware could be linked to "mass breaches" in the country and was related to infamous malware application Stuxnet and Duqu.
Flame (Worm.Win32.Flame) had existed since 2010 and spread via removable media according to the CERT and by exploiting a patched Microsoft printer hole -- the same tapped by Stuxnet.
It contained a backdoor and trojan and had worm-like features, allowing it to replicate in a local network and on removable media if it was commanded so.