The Core

Why We Are Here => Hardware & Technology => Topic started by: bill on June 02, 2011, 01:22:14 AM

Title: Microsoft rootkit removal tool
Post by: bill on June 02, 2011, 01:22:14 AM
Microsoft has a beta tool out that will allow you to remove rootkits and other malware. It's buried in their site and not promoted at all. Judging from the language used it's a tool recommended by Microsoft Support when customers have a really messed up system. However it looks like a useful addition to the average IT guy's arsenal. I've seen some pretty badly compromised systems recently and normally I just nuke the entire OS and start over, but there are cases where removal of the problem malware would be a real time saver.

They have 2 ISO images available; 32-bit and 64-bit. I'll be adding these CDs to my collection.
Microsoft Standalone System Sweeper Beta (http://connect.microsoft.com/systemsweeper)
Title: Re: Microsoft rootkit removal tool
Post by: eurotrash on June 02, 2011, 06:50:23 AM
Nice find Bill.  I like it.
Title: Re: Microsoft rootkit removal tool
Post by: Zwart on June 02, 2011, 10:31:22 AM
I've burnt one just in case. I'm experimenting with different virus scanners a bit: one day I'm gonna run into one that proves to be sh*te  :P
Cheers Bill
Title: Re: Microsoft rootkit removal tool
Post by: bill on June 02, 2011, 04:37:36 PM
Rootkits work below the OS, so this is a Windows image that works below that level.  I used this today and found something on a computer in a local bar. That unit gets infected with everything. ;-)