- Joined
- 8 Apr 2005
- Messages
- 16,950
I read a very nice article on Rootkit detection recently, and wanted to pass along some of the suggested scanners to others
F-Secure Blacklight:
https://europe.f-secure.com/blacklight/
GMER:
http://www.gmer.net/
HOOK Explorer: (actually checks to see if files have hidden themselves behind legit programs
http://labs.idefense.com/releases/previews/HookExplorer/
IceSword: Rumored to the best out there atm
http://xfocus.net/tools/200605/1162.html
Sysinternals RootKitRevealer:
http://www.sysinternals.com/Utilities/RootkitRevealer.html
I'm going to play with each one a bit and see how I like them
F-Secure Blacklight:
https://europe.f-secure.com/blacklight/
GMER:
http://www.gmer.net/
HOOK Explorer: (actually checks to see if files have hidden themselves behind legit programs
http://labs.idefense.com/releases/previews/HookExplorer/
IceSword: Rumored to the best out there atm
http://xfocus.net/tools/200605/1162.html
Sysinternals RootKitRevealer:
http://www.sysinternals.com/Utilities/RootkitRevealer.html
I'm going to play with each one a bit and see how I like them