Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Rootkit.Trace - Can it be removed?

  • This topic is locked This topic is locked
2 replies to this topic

#1 Ana55127


  • Members
  • 11 posts
  • Local time:11:07 PM

Posted 21 May 2009 - 11:36 AM

I've run Malwarebytes, removed infections, rebooted, re-ran Malwarebytes and have just one item - Rootkit.Trace

Can this be removed? After reading the forums it seems a reformat is my best bet? I work from home and this is my primary business computer so reformatting will be a huge task, however, I want to ensure it's gone. Also, if I do reformat, will I need to worry about back up files and documents that I reinstall causing a reinfection?

Thanks for your help!

BC AdBot (Login to Remove)


#2 rigel



  • Members
  • 12,944 posts
  • Gender:Male
  • Location:South Carolina - USA
  • Local time:12:07 AM

Posted 21 May 2009 - 01:37 PM

For rootkits, reformating is the only 100% way to know something is gone.

I recommend moving to the HJT forum for best cleaning results. That team uses advanced removal software that can only be used under the supervision of an expert.

Please follow this guide from step (6). Post a HJT log to the HJT forum and a Team member will be along to help you as soon as possible. You may wish to post a link back to this topic to see what was discussed thus far.

If you need any help with the guide, please let me know.

"In a world where you can be anything, be yourself." ~ unknown

"Fall in love with someone who deserves your heart. Not someone who plays with it. Will Smith

#3 Orange Blossom

Orange Blossom

    OBleepin Investigator

  • Moderator
  • 37,012 posts
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:12:07 AM

Posted 21 May 2009 - 11:34 PM

Hello Ana55127,

I see that you already had an HJT topic posted here: http://www.bleepingcomputer.com/forums/t/228345/infected-with-winpc-antivirus/

I know how frustrating it is when your computer isn't working properly. First, let me assure you that your topic isn't lost, forgotten, or ignored. We work with hundreds of logs every day, so we have devised a means of seeing only those topics that don't have responses yet. At the moment, we have nearly 700 unanswered topics, the oldest dated Wed May 06, 2009 7:19 pm Eastern Daylight Savings time in the U.S.A. Your HiJack This topic is dated May 20, 2009 4:50 PM using the same time zone.

Our volunteer HJT team members have various levels of expertise and training, so while we try to take the oldest DDS/HJT logs, it is often the skill level of the particular helper and sometimes the operating system that dictates which logs get selected first. Some infections are more complicated than others and require a higher skill level to remove. Without that skill level attempted removal could result in disastrous results. In other instances, the helper may not be familiar with the operating system that you are using, since they use another. In either case, neither of us would want someone to assist you who is not familiar with your issue and attempt to fix it.

We ask that once you have posted your log and are waiting, please DO NOT "bump" your thread or make further replies until it has been responded to by a member of the HJT Team. The reason we ask this or do not respond to your requests is because that would remove you from the active queue that Techs and Staff have access to. The malware staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response, there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.

Please be patient. It may take a while to get a response but your log will be reviewed and answered as soon as possible.

Thank you for understanding.

Orange Blossom ~ forum moderator
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users