Anti-virus scan detected rootkit...

**Spartan198** · 10-27-2008, 11:34

...but when I try to remove it, it tells me "Some files cannot be healed. Access is denied".

I've already deleted the file that it was detected in (even though I scanned that file several times after and didn't detect any infections), but I doubt that got rid of it. Any suggestions on how to?

I'm using Vista with AVG Professional, BTW (and no Vista criticism cracks, please).

**Caius** · 10-27-2008, 18:52

Can your run Vista in the other mode and run the anti-viurs?

**Spartan198** · 10-28-2008, 00:56

What other mode?

**Caius** · 10-28-2008, 00:59

Safe mode IIRC.

**Whacker** · 10-28-2008, 01:03

Safe mode most likely won't let you dislodge a rootkit. Others may have some more extensive experience with dealing with these than I do (and I've got enough), but by definition they are essentially impossible to dislodge without booting into a separate operating system, like through a Linux boot CD.

The best thing you can do is back up what you need, and repartition/reformat/reinstall your entire system from scratch. Doing anything less is dangerous, you may think you have the rootkit removed when in fact you don't, and even if you do manage to remove part or all of it, your system could be permanantly unstable.

Back up what you can. Repartition, reformat, reinstall. Do NOT just pop in a "restore" cd and go from there. You need to wipe the system clean and start fresh.