How to Use McAfee Labs RootkitRemover

Rootkit Remover is a stand-alone utility used to detect and remove complex rootkits and associated malware. Currently it can detect and remove ZeroAccess, Necurs and TDSS family of rootkits. McAfee Labs plans to add coverage for more rootkit families in future versions of the tool.

How do you use RootkitRemover?

Download the latest version of RootkitRemover.

When prompted, choose to save the file to a convenient location on your hard disk, such as your Desktop folder.

When the download is complete, navigate to the folder that contains the downloaded RootkitRemover file, and run it. It is best to run the tool in Administrator mode.

The tool then runs a window which shows the status of the process. The various stages are:

    Initializing

    Scanning

    Cleaning




    When the process is completed, it prompts the user to press any key to exit the tool.



It is recommended to reboot the system and perform a full scan with the Malwarebytes VirusScan to remove remnants of the infection that might still be left on the system.