For Debian:
$ sudo apt-get install rkhunter chkrootkit $ sudo rkhunter -c ... $ sudo chkrootkit ...
For Windows just use Sysinternals suite. There are two tools which help a lot:
Also you may use less powerful but built-in msconfig.exe to investigate startup processes registration.
Works nice on 32-bit Windows. But fail to properly handle paths on 64-bit.
Autoruns from sysinternals supresses HijackThis by quality and number of detected places.
List processes, services, autostarts, scans for rootkits or 3rd party file registration.
Under Windows 10 x64 it cause reboot due to write to rean-only memory.
Free active antivirus:
Free one time scan antivirus:
Disable nod32 services by 'msconfig' utility.
Remove such keys from registry by 'regedit':
HKEY_LOCAL_MACHINE\SOFTWARE\ESET HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NOD32DRV HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\eamon ==> ... easdrv easdrv EhttpSrv ekrn epfw Epfwndis epfwtdi