Rootkit Remover is a stand-alone utility used to detect and remove complex rootkits and associated malware. Currently it can detect and remove ZeroAccess, Necurs and TDSS family of rootkits. McAfee Labs plans to add coverage for more rootkit families in future versions of the tool.
Q: What is the need for the RootkitRemover tool?
A: RootkitRemover is not a substitute for a full anti-virus scanner. It is designed to detect and remove specific rootkit infections.
Q: How to use the RootkitRemover tool?
A: The tool can be run by either double clicking it or through the command-line. It is advisable to run a full system scan using McAfee VirusScan after removing any infection with the tool.
Q: How do I save the scan results to a log file?
A: The tool is designed to automatically save the report in the same folder as the tool is placed.
Q: Why do I need to rescan with McAfee VirusScan? Would I need to reboot the system after scanning with the RootkitRemover tool?
A: Stinger Rebooting the system helps the product kill the infectious threads injected into various processes leading to effective cleaning. Running a rescan of the system with McAfee VirusScan post cleaning is advisable to remove any remnants of an infection.
Q: I know I have a virus, but RootkitRemover did not detect one. Why is this?
A: RootkitRemover is not a substitute for a full anti-virus scanner. It is only designed to detect and remove specific rootkit infections.
Q: How can I get support for RootkitRemover?
A: RootkitRemover is being provided as a free tool to detect and clean specific rootkit families. It is not a supported tool. McAfee Labs makes no guarantees about this tool.