Trellix logo
Trellix CEO
Our CEO on Living Security

Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.

Gartner Marketplace Guide (XDR)
Gartner® Report: Market Guide for XDR

As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."

Trellix Launches Advanced Threat Research Center
Trellix Launches Advanced Research Center

Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.

The Threat Report - Fall 2022
Latest Report

Trellix Advanced Research Center analyzes Q3 2022 threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.

Trellix CEO
Our CEO on Living Security

Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.

RootkitRemover

 

How do you use RootkitRemover?

  1. Download the latest version of RootkitRemover.
  2. When prompted, choose to save the file to a convenient location on your hard disk, such as your Desktop folder.
  3. When the download is complete, navigate to the folder that contains the downloaded RootkitRemover file, and run it. It is best to run the tool in Administrator mode.

    rootkitremover-mcafee-logo
  4. The tool then runs a window which shows the status of the process. The various stages are:
    1. Initializing
    2. Scanning
    3. Cleaning

    rootkitremover-1

    When the process is completed, it prompts the user to press any key to exit the tool.


    rootkitremover-2

  5. It is recommended to reboot the system and perform a full scan with the McAfee VirusScan to remove remnants of the infection that might still be left on the system.

Frequently Asked Questions

Q: What is the need for the RootkitRemover tool?
A: RootkitRemover is not a substitute for a full anti-virus scanner. It is designed to detect and remove specific rootkit infections.

Q: How to use the RootkitRemover tool?
A: The tool can be run by either double clicking it or through the command-line. It is advisable to run a full system scan using McAfee VirusScan after removing any infection with the tool.

Q: How do I save the scan results to a log file?
A: The tool is designed to automatically save the report in the same folder as the tool is placed.

Q: Why do I need to rescan with McAfee VirusScan? Would I need to reboot the system after scanning with the RootkitRemover tool?
A: Stinger Rebooting the system helps the product kill the infectious threads injected into various processes leading to effective cleaning. Running a rescan of the system with McAfee VirusScan post cleaning is advisable to remove any remnants of an infection.

Q: I know I have a virus, but RootkitRemover did not detect one. Why is this?
A: RootkitRemover is not a substitute for a full anti-virus scanner. It is only designed to detect and remove specific rootkit infections.

Q: How can I get support for RootkitRemover? 
A: RootkitRemover is being provided as a free tool to detect and clean specific rootkit families. It is not a supported tool. McAfee Labs makes no guarantees about this tool.

Download RootkitRemover

Building a Culture of Security

Businesses have too much to lose if they don't prioritize security at every entry level. With more date to protect and cyberthreats eveolving, everyone must play a part in creating a culture of security. Let our Free Tools help implement a 'security-first' mindset across your entire company

Need a little more protectionfor your business?

Explore the Trellix Platform