How to defend from "rootkits" in computers ?

[b5blue]

OK now I'm learning about "rootkits" and how many (free) anti virus programs do not stop rootkits. They hide themselves inside as part of there install infection and once in place are not detectable.  Can anyone here enlighten me, apparently the only way to rid yourself of them is to wipe everything out and start over. (I don't have a problem yet but other than a malfunction how would you know?)   

[0X01B8]

Well, if you really want to be sure and sleep better, then yes, you'll want a clean format/install.

[John_Kunkel]

Many spyware programs claim to elimitate/block rootkits.

[b5blue]

Thanks guys everything is and has been fine, I'm just trying to keep it that way.

[dodgecharger-fan]

www.sysinternals.com - now a microsoft site - has a program called RootkitRevealer.

http://technet.microsoft.com/en-us/sysinternals/bb897445.aspx

That, and the other sysinternal programs are great. I use Process Explorer and TCP View all the time.

[b5blue]

Wow Thanks! That's what I was hoping to find.  Kernel rootkits are bitch, your link explains why a standard scan can't apply (the rootkit can defend against it if it has a file name basically) I'm a noob trying to learn before getting burned! 

[chargergirl]

Always have your "rebuild" CD's to the side. Many great programs out there to watch for malware but too many new and inventive ones to keep up with that it does happen sometimes. Yield Manager is one of the worst and you get it by buying a "safeware" program. You need three programs to get rid of it and one of those programs is the one that put it there. Hows that for cornering the market? Clear cookies before shutting down is one way to keep the programs out that "open upon booting" hard drive grab.

[b5blue]

Thanks! Yup SOP coming out of Firefox! 

[Foreman72]

check out superantispyware...top notch...