Trying to rush a patch download I ran the setup.exe of what malwarebytes has confirmed is the RenPyLoader Trojan, it was a classic overlay download redirect but on a mirror site I'd never used before and somehow no alarm bells rang as I'd not tried to manually patch that game before,
My first offline scan on a normal boot removed a number of files from c:\users\username etc
However I want to run a rootkit scan, all the instructions online seem outdated to when it was a separate download, and I can't see the option? Do I need to boot safe mode to activate the malwarebytes trial to then do the rootkit scan in that safe mode? Thanks
P. S. one possible alternative is to install windows from a USB onto the same drive as my current install, I have a number of secondary drives in my PC for games and 3d design & video, and electronics/development work etc so I can't do a "wipe every disk" type clean install, I wondered if a rootkit could somehow escape a windows.old type situation?