The Bitdefender Rootkit Remover deals with known rootkits quickly and effectively making use of award-winning Bitdefender malware removal technology. Unlike other similar tools, Bitdefender Rootkit Remover can be launched immediately, without the need to reboot into safe mode first (although a reboot may be required for complete cleanup).

New to Rootkit Remover? Not sure what to expect? Get the FAQ.

Rootkit Remover deals easily with Mebroot, all TDL families (TDL/SST/Pihar), Mayachok, Mybios, Plite, XPaj, Whistler, Alipop, Cpd, Fengd, Fips, Guntior, MBR Locker, Mebratix, Niwa, Ponreb, Ramnit, Stoned, Yoddos, Yurn, Zegost and also cleans infections with Necurs (the last rootkit standing). Please note that the list is a bit outdated - new rootkit families are added as they become known.


Both x86 and x64 Rootkit Remover kits are available, please choose the appropriate one for your system.


 x86 version of Bitdefender Rootkit Remover

x64 version of Bitdefender Rootkit Remover

95 Responses to Rootkit Remover

  1. Mongoplus says:

    Is this program Portable???

  2. Gregg DesElms says:

    Comodo AntiVirus says the x86 version is “suspicious” but I reported it as a false positive because, c’mon, BitDefender is not going to put something bad on anyone’s machine.

    However, I’m doubting that it actually did anything because from the moment I clicked on the button to start the scan, until it popped-up a notice that not only the scan, but also removal were complete, was quite literally one-half second. No software on earth could scan a 320GB hard drive for rootkits in one-half second. This app is obviously not ready for prime time. Please get it right before you unleash it on the universe.

    32-bit Vista SP-2 on a Dell Inspiron 1525 laptop.

    • smr says:

      It’s not a full-fledged antivirus, that much should have been clear to you from the description. It only detects and removes some known rootkits, IF they are present on the machine. If not, it does nothing. Thanks for reporting the FP.

  3. AJ says:

    the rootkit remover encountered an error and requested me to send logs to you. where do i send them?

  4. steven says:

    Wait a minute. This is a bootkit remover and not a rootkit remover. Isn’t it possible to put all your antirootkit tools (TDSS, Pihar,…) into one tool that scans the whole pc and not just the MBR? Thank You!

    • smr says:

      This might happen. It could even be the reason for which the tool is called Rootkit Remover, even though it only deals with MBR-infecting rootkits (aka bootkits) so far.

  5. Marmota says:

    you forgot debug information in release executable(x86)

  6. mtivadar says:

    will be fixed! thank you. adf

  7. Bob Gies says:

    How do I know which 1 to download? X86 or x64?

  8. Clear says:

    @ Bob Gies – on your keyboard press the windows key and the letter R – in the run box type: msinfo32 and enter. With System Summary highlighted on the top left, System Type on the right tells you if you have a 32 bit (x86) or a 64 bit (x64).

  9. nevermind says:

    it would be good if you put the final version of this in internet security 2013 via some future update!

  10. yang says:


  11. Michael says:

    Very Good….Thank you…

  12. Paddy says:

    Will Bitdefender Rootkit Remover conflict with McAfee Internet Security Suite?

  13. toad says:

    i had rootkit.boot.pihar.c and it removed it. thanks

  14. Paddy says:

    very good, many thanks

  15. John M says:

    what are x86 & x64 versions? I need a 32-bit version for a laptop running Windows 7.

  16. gaga says:

    x86 is 32bit

  17. alex m says:

    downloaded on chrome, click the download application, user account control comes up and I click on run and nothing happens. what gives? is there a way to fix it?

  18. Abrax says:

    En mi caso tengo 1.32TB de disco duro, y la verdad, escaneó todo en medio segundo?, me cuesta creerlo.

  19. Stevo says:

    Using Bitdefender Rescue CD and the rootkit scan shortcut is missing. Should it be on the desktop or do I need to run it from a command? Cool CD keep up the good work! Thanks for your help.

  20. Alex"> says:

    Nice prog.

  21. GF says:

    Rootkit Remover is excessively fast. The scan lasts one second only…
    Does Rootkit Remover really work or is it a prank??? 🙂

  22. CyberGhosT says:

    Don’t get me wrong I love my Bitdefender, but why in the hell in 2013 is the rootkit tool for BD not built in with the ability to run this kind of check at start up ? Kaspersky and Norton 360 both have the ability but not Bitdefender and Bitdefender is supposedly the best of the 3. No offence intended

  23. aTechMate says:

    i would use a trail version of hitman pro if needed, who gets a rootkit virus everyday

  24. steven says:

    Your rookit tool scans only the mbr.
    Will you make a version that scan the entire pc?

  25. Xander says:

    I would like it with 1) a commmand line parameter to automatically start scanning (is there any reason not to once it’s done it’s prep?) and 2) to output the results to a log.
    I don’t have an infected machine to test it on but does it automatically remove anything it finds?

  26. KSnyder says:

    Can’t run this in safe mode? What if you’ve got an infection that prevents Windows from starting in anything but SAFE mode? Something’s got my computer that blanks the screen and disables the UI instead of going to the desktop. So … I can’t run your program?

  27. KevinC says:

    We got the Rootkit.MBR.Sst.C and removed it with this tool. Thanks!

  28. Cart says:

    I scanned and it was done within 2 seconds, is it supposed to be that quick???

  29. Mario says:

    Ran this program and found virus: “Rootkit.MBR.Pihar.G (Boot Image)” but program could not clean it. Any ideas on how to remove virus?

  30. mexcan says:

    doesn’t work on Linux 🙁

  31. Harja says:

    please i need help. what mean this word “Found #146 : Rootkit Tools”

  32. Scott says:

    I have Bitdefender Total Security installed. Does this tool do something beyond what BDTS does on its own?

  33. DPoddar says:

    Does your rootkit remover work as a portable application from pendrive or usb flash drive ?

  34. yosua says:

    do you know about “Found #146 : Rootkit Tools”?? if you know about it, can you give me any solution to solve it???

  35. mika says:

    I use bit defender plus for W7 but when I scan my USB pen drive , scanning stuck at 99% after 10 minutes and the process completed (100% scan) after 28 minute .please help. should I need to check rootkit?

  36. Eagleeyes says:

    I want to remove malware virus

  37. Andrew says:

    Does this program fix android

  38. RandallWalters says:

    malware detectedon my phone said it’s a Trojan.

  39. steven roberts says:

    Malware removall

  40. ManeDawg says:

    Does it really take 1 second to scan?

  41. Giovonni says:

    Reading the comments, you guys are hilarious. Unlike every other AVS company out there, you don’t make the least bit effort to act professionally.

  42. mavery says:

    whos the author of this article?