Reply to Message

I have heavy rootkit activity recently on computers I've fixed. I have defaulted to running Sophos Rootkit detector first. Then follow up with Malwarebytes. A cursory glance at the IE settings via hijackthis and I'm usually done. Now if the client is running XP then I like to use combofix. All the while making sure my clients pograms and documents don't get deleted.