mudmanc4 Posted June 16, 2009 CID Share Posted June 16, 2009 This is something that although light hs been shed in for some time now, still, continues to go relatively un noticed, and that's just what those that are determined to compromise your system enjoy. A rootkit is some thing that is used to hide the fact that there are vulnerabilities on your system. So no matter how much you pay, no matter what your personal preference of antiviral software is, or how often you scan for them, you will not find them. Rootkits often modify parts of the operating system or install themselves as drivers or kernel modules, depending on the internal details of an operating system's mechanisms. Source So as you can see, (pun intended) you cannot see the culprit. And since they act as system devices, or necessary software, there not detected generally during a standard scan. Many of the antivirus programs now have different types of rootkit scanners, but as with other widely used programs, "they" , work all the more diligently to develop rootkits that shut off that part of the scanner during the scan, or hide during the scan. There are fingerprint detectors within some antiviral programs that are able to detect "hidden" rootkits, but it's a daily battle. One of the most trusted rootkit finders would be Radix , never heard of it ? Imagine that. Iv'e used it on systems where I would say "nope, nothing bad here ", and there you have it, right there the culprit is. Which will explain a plethora of different issues you may have been having, that you wrote off as bandwidth issues, or "oh well, it's just one popup ". Another is Sophos If you have any proven methods, or software solutions to detect, remove rootkits, feel free to add, them. Link to comment Share on other sites More sharing options...
coknuck Posted June 16, 2009 CID Share Posted June 16, 2009 I've always run Panda Anti-Rootkit. Its free and seems to do its job. http://www.pandasecurity.com/homeusers/downloads/docs/product/help/rkc/en/rkc_en.htm Here are some others for you to check out http://www.techsupportalert.com/best-free-rootkit-scanner-remover.htm#jeffarticle EDIT: Radix and Panda are not compatible with Windows 7 or Vista! Go figure! Link to comment Share on other sites More sharing options...
Recommended Posts