Webroot Poor Cleaning Of Redirect Points Created By Rootkits

Hi Joe,

This kind of Rootkits (PM you a sample ) if in a scenario is already infected on a user PC before installing Webroot. After installation of Webroot it will remove the rootkit but the this rootkit disables windows defender. Even after cleaning the rootkit by Webroot windows defender can not be open because its corrupted by the rootkit. It make something called redirect points according to scanning by Hitman Pro.

If i ran a scan in latest Hitman Pro (http://www.surfright.nl/en/hitmanpro/) it will detect these redirect points and repair it. After Hitman Pro clean up I can open windows defender as usual.

So please deeply analysis this malware and make Webroot capable of repairing cleaning also the re-director points made by nasty malware's. I hope next 2014 product update will make Webroot to clean and repair redirect points created by malware.

Regards,
Dark Lord

 

Thanks! We'll add generic support for restoring Windows Defender and removing these types of changes into one of the next updates.

Let me know if you find anything else

 

Awesome That's how a product should be developed
Good Luck Joe for upcoming 2014 update

Regards,
Dark Lord