Good catch - JB2. Did you check the CastleCops Wiki? (look on the left panel) I think what started out here, has been continued there - under beta content - for now.

RootkitRevealer by SystemInternals, downloaded from here is used to detect the presence of rootkits. Not sure there is anything out there yet claiming to automatically remove/repair too. Not sure I would want anything to "automatically" do it anyway - not unless there is a fail safe recovery process should it clean too aggressively. And I don't see that coming any time soon.

_________________
Bill, AFE7Ret
Freedom is NOT Free!

Interesting suggestions being made here. In case anyone isn't aware of it, Swatkat`s original post is at the wiki. Thus anyone can implement their suggestions at the wiki article and/or discuss suggestions, changes made, etc at the corresponding talk page. Please don't rely on Swatkat to carry the load; if you think changes are warranted, make them yourself. Have no fear; if the changes are not quite on the mark they will be modified by others.

Nice point Ikeb.

From now on please go to the link in Ikeb's post to make suggestions or alterations to this work. Become a CastleCops Wiki Member/Contributor. It's exciting stuff.

This thread is now locked. PM a Moderator if you need it re-opened.

Thanks

_________________

Microsoft MVP Consumer Security 2006, 2007 & 2008