Solved

Best rootkit cleaner if I have to slave drive in another system

Posted on 2010-08-23
8
2,888 Views
Last Modified: 2012-05-10
I have a posible rootkit infection and really don't want to wipe the drive clean. I am getting a blue screen on startup and cannot get into windows. I looked up the BSOD and seems like it could be a rootkit. I would like to slave the drive in another system and scan it for a rootkit. I already tried slaving it and running Vipre and it didn't detect anything. Maybe i should try supperantispyware.
any other suggestions?
0
Comment
Question by:calitech
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 9

Accepted Solution

by:
Darksquire earned 100 total points
ID: 33502978
0
 
LVL 8

Assisted Solution

by:tskelly082598
tskelly082598 earned 100 total points
ID: 33503620
0
 
LVL 22

Assisted Solution

by:optoma
optoma earned 100 total points
ID: 33503694
Try these when system is live. If a rootkit is detected(patched system file).
They should be able to replace the file.
Run TdssKiller and Hitmanpro.
http://support.kaspersky.com/viruses/solutions?qid=208280684
http://www.surfright.nl/en/hitmanpro

If still having issue run Combofix and post log here
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

IF slaving the drive or using a boot cd, keep the logfiles.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 25

Assisted Solution

by:madunix
madunix earned 100 total points
ID: 33508982
look @ Bootable antivirus Rescue CD
http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/
Bootable antivirus Rescue CD method consider as the most effective way to remove the virus, trojan and malware because it track down some viruses, trojans and other malware are embedded so tightly into your operating system that when you boot Windows the normal way.
0
 
LVL 2

Assisted Solution

by:dragon24
dragon24 earned 100 total points
ID: 33510119
Combofix does a great job as optoma suggested. You might also want to try Malwarebytes. www.malwarebytes.org
0
 
LVL 2

Expert Comment

by:dragon24
ID: 33637742
Calitech, have you tried any of the above suggestions? Any update status?
0
 

Author Closing Comment

by:calitech
ID: 33791594
thanks for the information
0

Featured Post

Secure Your Active Directory - April 20, 2017

Active Directory plays a critical role in your company’s IT infrastructure and keeping it secure in today’s hacker-infested world is a must.
Microsoft published 300+ pages of guidance, but who has the time, money, and resources to implement? Register now to find an easier way.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

There are many reasons malware will stay around and continue to grow as a business.  The biggest reason is the expanding customer base.  More than 40% of people who are infected with ransomware, pay the ransom.  That makes ransomware a multi-million…
I've been an avid user and supporter of Malwarebytes Premium Version 2.x for years. It's an excellent product that runs alongside just about any Anti-Virus application without issues. It seems to have an uncanny ability to pick up many things that A…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question