BleepingComputer.com: Icesword

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

Icesword ???

#1 howard11

Member

Group: Members
Posts: 49
Joined: 23-May 06

Posted 08 November 2006 - 02:13 AM

I recently downloaded the english version of this program. Does anyone know how it works, instructions etc. Does it just work in the background?

#2 sultan_emerr

Member

Group: Members
Posts: 46
Joined: 26-May 04
Location:EL Abdula Oasis

Posted 08 November 2006 - 02:32 AM

Do you really trust a program produced by the ChiComs?

http://www.dailyrotation.com

#3 howard11

Member

Group: Members
Posts: 49
Joined: 23-May 06

Posted 08 November 2006 - 06:38 PM

thanks boofhead.

#4 buddy215

Forum Addict

Group: BC Advisor
Posts: 4,578
Joined: 14-April 06
Gender:Male
Location:West Tennessee

Posted 08 November 2006 - 07:08 PM

Post #27 in the link below has info that might be what you are looking for:
http://www.wilderssecurity.com/showthread....1981&page=2

#5 howard11

Member

Group: Members
Posts: 49
Joined: 23-May 06

Posted 09 November 2006 - 09:48 PM

thanks, will have a look.

#6 Grinler

Bleep Bleep!

Group: Admin
Posts: 36,602
Joined: 24-January 04
Gender:Male
Location:USA

Posted 16 November 2006 - 01:05 PM

Icesword is not only a legit program but one of the best rootkit detectors out there. Unfortunately documentation is scarce. What do you want to know specifically if you have not figured it out already?

Lawrence Abrams
Circle BleepingComputer on Google+!
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
How to detect vulnerable programs using Secunia Personal Software Inspector <- Everyone should do this!

#7 howard11

Member

Group: Members
Posts: 49
Joined: 23-May 06

Posted 18 November 2006 - 01:27 AM

Basically I just wanted to know if it is a program that I have to set up and tinker with or is it something that just runs in the background. What happens if this program finds something? Does it just delete it or let you know? I know there are lots of things to look at, but being a novice I don't really know what I'm looking at. Pretty vague, but thanks in advance for your help.

#8 quietman7

Bleepin' Janitor

Group: Global Moderator
Posts: 25,507
Joined: 09-July 05
Gender:Male
Location:Virginia, USA

Posted 18 November 2006 - 09:29 AM

I would consider IceSword to be more of an advanced tool. It is a stand-alone tool that shows you program components (processes) in memory, Ports, API hooking, Services, Startups and more. It will not actually tell you if you are infected or not unless you know what you're looking for. If you don't, you're probably better off with something like UnHackMe.

There is a translated tutorial for using IceSword here.

Microsoft MVP - Consumer Security 2007-2012