Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteOn a supported Windows PC, start with a Microsoft Defender Offline scan. It restarts the computer and scans outside normal Windows, which makes it a better first check for persistent malware such as rootkits than relying only on scans run inside Windows. A clean result is not proof that a rootkit is absent: malware can interfere with information reported by a running system.
What a rootkit scan can—and cannot—tell you
Rootkits can hide malware by intercepting or changing normal operating-system processes. Microsoft warns that after a rootkit infects a device, “you can’t trust any information that device reports about itself.” That makes an ordinary process list or in-Windows scan an imperfect source of assurance.
Microsoft Sysinternals’ RootkitRevealer documentation puts the limit plainly: “In general, not from within a running system.” Its explanation is that a kernel-mode rootkit can compromise the results returned through operating-system APIs. Scanning from a separate, trusted environment is more reliable, although no scanner can guarantee that it will find every threat. A scan that reports no detection is not a guarantee the PC is clean.
Slow performance, pop-ups, or unexpected browser redirects can be reasons to scan for malware, but they do not by themselves establish that a rootkit is present. Microsoft lists these as possible signs of malware generally, not rootkit-specific evidence.
#1 Best Overall
![Norton 360 Deluxe 2027 Antivirus, 3 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41qw3FS3qLL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 3 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
Run Microsoft Defender Offline on a supported Windows PC
Defender Offline restarts the device into a trusted environment so the scan can run without loading the normal Windows kernel. Microsoft describes it as a way to target persistent malware, including rootkits and infections that affect the master boot record (MBR).
Check prerequisites before starting
- Confirm that the computer and Windows edition are supported by Microsoft’s Defender Offline documentation. The documented scan excludes ARM versions of Windows 10 and Windows 11, and Windows Server SKUs.
- If the system drive is protected by BitLocker, suspend BitLocker protection before the restart or have the BitLocker recovery key ready in case Windows asks for it.
- Save open files and work. Starting the scan restarts the PC.
Start the scan and review its result
- Open Windows Security.
- Select Virus & threat protection, then Scan options.
- Choose Microsoft Defender Offline scan and select Scan now. The computer restarts and runs the scan outside normal Windows.
- After Windows starts again, open Windows Security > Protection history to review the result.
- If a threat is listed, review its name and the action taken, then follow Windows Security’s quarantine or removal instructions. If the detection returns or other indicators persist, move to the recovery steps below rather than treating another ordinary scan as proof of safety.
When bootable scan media makes sense
Microsoft also documents creating removable offline scanning media on a clean computer. It is an alternative to launching Defender Offline from Windows Security when the installed Windows environment cannot start that scan. The Windows Security route is simpler when it is available; bootable media requires a separate creation process and access to a clean computer.
Rank #2
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
Back up the USB drive before creating the media. Microsoft’s removable-media instructions warn that the creation process reformats the drive and erases its contents. Check that the PC is supported and account for BitLocker recovery before booting from external media.
If detections or infection indicators persist
Microsoft’s rootkit guidance recommends reinstalling the operating system and security software if the problem persists, then restoring data from a backup. This is the escalation path when a scan or removal has not resolved the problem; symptoms alone are not proof that a rootkit is present.
Rank #3
![Norton 360 Deluxe 2027 Antivirus, 5 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41IYV5zGyCL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 5 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
Restore only data you trust, and keep security software and Windows up to date. Microsoft recommends regular backups using a 3-2-1 approach: maintain three copies of important data, on two types of storage, with one copy stored separately. A backup made after infection may also contain compromised files, so choose a known-good backup where possible.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Keep the distinction between a malware scan and a rootkit guarantee
Microsoft Safety Scanner is a separate, manually run Windows malware scanner. Microsoft says each download expires 10 days after download and recommends downloading the latest version before every scan. It can supplement a malware check, but Microsoft’s available guidance does not establish that Safety Scanner alone resolves every rootkit or firmware-level infection.
Rank #4
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
For suspected rootkits, prioritize an offline scan and judge the outcome cautiously. This procedure is specific to supported Windows PCs; the sources cited here do not establish equivalent steps for macOS, Linux, or mobile devices.
Quick Recap
Best Value
![Malwarebytes Standard, Premium Security| Amazon Exclusive | 18 Months, 2 Devices | Windows, Mac OS, Android, Apple iOS, Chrome [Online Code]](https://m.media-amazon.com/images/I/41LbYnawq9L._SL160_.jpg)
- AWARD WINNING Antivirus, anti-malware, anti-spyware & more
- 24/7 REAL TIME PROTECTION against emerging malware threats, including ransomware and viruses- without slowing you down.
- PROTECTS YOUR DEVICES ON MULTIPLE PLATFORMS: Get cyber protection for your computers, smartphones, or tablets- Compatible with Windows, Mac, Android, iOS
- DOWNLOAD AND INSTALL INSTANTLY
- UNMATCHED THREAT DETECTION: We found malware on 40 percent of devices that already had a third-party antivirus installed.
Sources
- Microsoft: Rootkits
- Microsoft Learn: Microsoft Defender Offline
- Microsoft Support: Stay protected with Windows Security
- Microsoft Sysinternals: RootkitRevealer
- Microsoft Learn: Microsoft Safety Scanner
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problems
