Troubleshooting a Trojan rootkit

I have Windows XP Professional SP1. Trojan.rootkit.h keeps coming back after rebooting even though I have deleted its infected files from the drive and registry several times. I've used every adware and spyware removal tool possible, so I'm quite clean now. Symptoms besides physical presence include inability to run msconfig, regedit and taskmanager, as well as having the Windows Installer stop on me. This makes it impossible to update it to version three, since that also uses the MSI utility. Do you have any thoughts on this? Thanks in advance!
You may want to try Ewido. Otherwise, as drastic as this may sound, my suggestion would be to back up your data files and reload the system -- Windows and all your apps. This will likely take less time than trying to troubleshoot this further, and you'll have a clean system to boot (pun intended).

Also check out our Prevention Guide on detecting and removing rootkits in Windows.

This was last published in May 2005

Dig Deeper on Patches, alerts and critical updates



Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.



Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: