Free Rootkit Removal Programs
This is a quick post on free rootkit removal. I get 5-10 emails a day on how to remove rootkits, so I'm hoping this will answer a few of those.
Rootkits can be removed for free with:
1. A Bootable AntiVirus Disc (like the Avira free rescue cd). Rootkits reside in the system32 folder, so make sure you
scan the entire folder in the bootable disc environment (this method is by far my favorite).
2. GMER. Which can be downloaded from: http://www.gmer.net/. Using GMER is pretty simple. Start it. Run a scan.
Disable or remove anything that is RED.
3. Rootkit Repeal. It's free rootkit removal and can be downloaded from http://rootrepeal.googlepages.com/
4. UnHackMe. More free rootkit removal.
5. ComboFix. Features the userland rootkit detector. Typically works best on XP. Not for the inexperienced.
My rootkit removal video will demonstrate each of the above methods.
Most Commented Posts
Related posts:
- Atapi.sys Rootkit is EVERYWHERE! Man...every client I've seen for the past 2 weeks...
- Nasty New Rootkit Patches Atapi.sys For the past 7 days I've been seeing a...
- Free Malware Removal Every couple of months I like to let people...
- Skynet Rootkit – When Malware with Movie Names Attack! No, the global A.I. network of man killing machines...
- Malware Status for Summer 09 – Notes To Self My malware removal business has exploded this month. More...
Related posts brought to you by Yet Another Related Posts Plugin.
Most Commented Posts
I use a couple of program like ‘OTListIt’ which lists all files created/edited in 30day/2months/3months. Perfect for fining 0 day infections
I am very interested in this as these seem to be the worst threat. Many free AV programs miss the rootkit and it is hard to remove.
I recall Matt saying Dr. Web had the best rescue disk to “repair” files after a rootkit attack. Other rescue disks and combofix can make windows XP unusable and make a re-installation of windows necessary.
Which rescue disks and other remedies are good at repairing a windows installation so a reinstall is not necessary after a rootkit attack?
http://remove-malware.com/antimalware/anti-malware-howto/how-to-remove-a-patching-virus-w32virut-w32sality/
This is the video I was thinking about.
Sality and Virut. Matt said a solution needs to be able to repair the affected files instead of just deleting them.
Thanks in advance for the info.
There’s another program – rootkit revealer by safer networking:-)
ok first of all if you want to remove rookkits/ spyware to go this web page.
http://www.superantispyware.com
http://www.malwarebytes.com
those will remove any spyware superantispyware has tools to recover your system from malware damage but i use both.
now for your anti virus and prevention when security essentials becomes avalibul i sugest you download that for now youcan go to this web site for your anti virus
http://www.comodo.com
they have a great free anti virus. do not download avg free anti virus its stinks removeing malware avg free dose not remove rootkits to many people have avg free and think there fully protected but there not avg free dose not detect rootkits!!!!!!!!!!!!!!!!!!!!!!!!! thats why poeple are haveing a hard time with rootkits everyone uses *avg free*
http://www.superantispyware.com
http://www.malwarebytes.com
http://www.comodo.com
all the tools you need to stay protected.
do not use avg free it dose not detect root kits
how come when i give people links to superantispyware
and malwarebytes and comodo like http://www.comodo.com its says comment awaiting moderation????? wtf???? and it dosent show up
@Ryan – if you haven’t commented before or for awhile I need to approve it. Sorry for the delay.
Hi,
I use AVG Free And TreatFire, Threat fire has a built in rootkit scanner so any root kits should not get past that. I think the reason that AVG Free dose not contain a rootkit scanner is because its one of the ways they sell their paid products as it is a benefit of buying the full version.
Matt have you got any ideas when the KAV 2010 review will be uploaded?
Thanks
Correct me if I’m wrong but I don’t think that AVG does not have rootkit protection.It just has not a rootkit scanner,to reveal hidden files.But for prevention it doesn’t have a difference with the paid version.At least I think so…It has hapened for me to stop threats named rootkit..something.
@Vasilis, It says on their website (http://www.avg.com/uk.product-avg-anti-virus ) Protection but if in the Free version their is an option to enable rootkit scanning but its disabled because its the free version as i remember from when i had the full version trail you could enable it it?
Hope thid helps clear up the confusion
Nice post!