Duqu rootkit and the heist it furthers
The heritage of Duqu rootkit (alias Rootkit.Duqu.A) malign code is non-trivial. Its forerunner is the worm called Stuxnet discovered in summer 2010 which initially affected industrial systems running 32-bit and 64-bit versions of MS Windows Operating System. Although Duqu rootkit implements a very similar task, it evidently appears to be somewhat more sophisticated than its precursor as it blends backdoor essence with keylogger functions. To cut it short, this parasite aims at spying on users’ computer activities. The scope of such potentially compromised information is large enough for anyone to be cautious. Just a few of such samples are your credit card details, passwords, usernames etc., all being typed by almost anyone on a daily basis. By tracking your keystrokes, Duqu rootkit not only stores these data but succeeds in sending them over to a remote analytic center controlled by the people who can apply the obtained facts for really bad purposes. There is one thing arising no doubt in the context of analysing this issue: Duqu is a terrible digital threat endangering the integral cyber part of your life. Although the pattern of treating this pest is obvious, it’s up to you what conclusions to draw if you got this virus.
How to detect and remove Duqu rootkit malware
To ensure Duqu rootkit accurate detection and efficient removal, we strongly recommend using the trusted remover with free scanner.
If you intend to perform manual malware removal, you need to possess some computer troubleshooting skills. This will require stopping the malignant processes, deleting malware files and registry keys.
Terminate Duqu rootkit processes:
mcshield.exe
avguard.exe
bdagent.exe
umxcfg.exe
fsdfwd.exe
rtvscan.exe
ccSvcHst.exe
ekrn.exe
tmproxy.exe
RavMonD.exe
Delete these files and folders:
%WINDOWS%\nf\cmi4432.PNF
Remove Duqu rootkit registry keys:
In order to avoid system damage, we advise using the automatic tool which will do the removal job for you.
Important Notice
This site is not related to Duqu rootkit in any way, nor is it affiliated with or owned by its creators. Any information available on antivirustech.com is not to be in any way associated with distribution of this infection.
Our primary and sole mission is to instruct our visitors in the issues of Duqu rootkit detection and manual/automated removal methods.
Please bear in mind that manual removal of this malware is not ultimately effective because the corrupted file names can get repeatedly modified or be hidden. Therefore it’s recommended to use the automatic solution to ensure the removal of this scam and eliminate possible risks that may arise due to improper registry and file system manipulations.
The free virus scanner provided on our website is meant for detection only. If you choose to use the tool for malware removal, you will need to buy its full version.
Computer acting up?


