IPsec.sys infected – TDSKILLER won’t remove rootkit
So TDSKILLER was unable to remove a rootkit that infected ipsec.sys. After a quick Google search, I found my answer. I had to run SFC /SCANNOW.
Here’s how to do it:
-
Open the command prompt
-
Type sfc /scannow in the command prompt and press enter (there’s a space between sfc and /scannow)
-
This will check the integrity of every protected Windows file
-
It might ask for your original Windows installation CD
-
Restart your computer after it’s complete
-
Run TDSKILLER again and ipsec.sys is no longer infected
This is how I solved my issue and hopefully it resolves yours…
