Best Rootkit scanner/remover ever?
Posted 14 January 2010 - 04:32 PM
I found this list here: http://www.techsupportalert.com/best-free-...Selection_Guide
But they are all free and they do not have the best reviews. (examples: Panda, GMER, etc).
So again, what is the VERY BEST rootkit scanner ever made?
BC AdBot (Login to Remove)
Posted 14 January 2010 - 05:00 PM
Why? Not all hidden components detected by ARKs are malicious. It is normal for a Firewall, some Anti-virus and Anti-malware software (ProcessGuard, Prevx1, AVG AS), sandboxes, virtual machines and Host based Intrusion Prevention Systems (HIPS) to hook into the OS kernal/SSDT in order to protect your system. SSDT (System Service Descriptor Table) is a table that stores addresses of functions that are used by Windows. Whenever a function is called, Windows looks in this table to find the address for it. Both Legitimate programs and rootkits can hook into and alter this table. You should not be alarmed if you see any hidden entries created by legitimate programs after performing a scan.
Some files are locked by the operating system or running programs during use for protection, so scanners cannot access them. When the scanner finds such a file, it makes a note and then just skips to the next one. API Kernel hooks are not always bad since some system monitoring software and security tools use them as well. If no hooks are active on a system it means that all system services are handled by ntoskrnl.exe which is a base component of Windows operating systems and the process used in the boot-up cycle of a computer.
These are a few of the easier ARKS for novice users:
Edited by quietman7, 14 January 2010 - 05:28 PM.
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users