Good tools for manually detecting/dealing with rootkits/malware:

Gmer: 

http://gmer.net/index.php

In my experience, if it gives you ANY type of error, then there IS a rootkit present.

 

Catchme:

http://gmer.net/catchme.php

Great for quickly detecting hidden processes, services, and files.. (then you can usually use Unlocker on them and delete)

 

Avenger:

http://swandog46.geekstogo.com/avenger2/avenger2.html

use this to detect a rootkit & disable it while restarting.. very powerful script engine as well.

 

sdfix:

http://downloads.andymanchesta.com/RemovalTools/SDFix_ReadMe.htm

great all around automated malware/system policy fixer type util.. works in safe mode only, takes about 20 minutes.

 

Chip Warner
Mobile Computer Wizard
858 776-0535 Cel
619 255-1215 Office
chip@mobilecomputerwizard.com