Bill Sanderson MVP said:
It was completely obvious the machine was
infected--popups all over the place, no matter that everything gave it a
clean bill of health.
I've never found a rootkit on a machine which had no symptoms of having
one--but those are the ones you want to find, of course.
Yes, but this is really helpful to know, Bill - I mean that there were these
other symptoms in the case you're describing.
Whenever I read about rootkit detection, I find there's always a warning
about a degree of interpretation being required to know what the results mean
(you mentioned it yourself). That doesn't sound like a road I want to go
down, either for fear of doing more harm than good, or because of the effect
on my blood pressure of trying to interpret results I can't understand.
My feeling is this: if the Malicious removal tool finds nothing; if I'm
running behind a router and a firewall, with effective antimalware RTP in
place; if all my scanners say I'm clean; if I continue to adopt my usual
circumspection with regard to websites and email attachments; and if my
computer is behaving in a perfectly normal way - then I don't think I need to
start dealing with the nightmare of rootkit detectors.
Does that seem a reasonable position to take?