Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”― Lawrence M. Krauss A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”
Icesword is not only a legit program but one of the best rootkit detectors out there. Unfortunately documentation is scarce. What do you want to know specifically if you have not figured it out already?
Basically I just wanted to know if it is a program that I have to set up and tinker with or is it something that just runs in the background. What happens if this program finds something? Does it just delete it or let you know? I know there are lots of things to look at, but being a novice I don't really know what I'm looking at. Pretty vague, but thanks in advance for your help.
I would consider IceSword to be more of an advanced tool. It is a stand-alone tool that shows you program components (processes) in memory, Ports, API hooking, Services, Startups and more. It will not actually tell you if you are infected or not unless you know what you're looking for. If you don't, you're probably better off with something like UnHackMe.
There is a translated tutorial for using IceSword here.
. . Windows Insider MVP 2017-2018 Microsoft MVP Reconnect 2016 Microsoft MVP Consumer Security 2007-2015 Member ofUNITE, Unified Network of Instructors and Trusted Eliminators
If I have been helpful & you'd like to consider a donation, click