Free Rootkit Scanners - (the nasties that Antivirus software can't find)

albertross_2

........................

mr_fishbulb

Microsoft also do a Free Malicious Software Removal Tool:
http://www.microsoft.com/security/malwareremove/default.mspx

pchelpman

Rootkit infections are becoming more prevalent. These scanners are OK - I use Backlight - but the danger is as albertross suggests, namely, it's not what the scan reveals but HOW to read the information and to KNOW what to do with it.

You don't just delete everything these scans show up.

I had a user on another site run HJT and report back to me. They ran HJT then proceeded to put tick marks against everything in the scan and fix the lot. Result - computer virtually non-functional. Thank God for HJT backups.

Point is ... just be careful WHAT you choose to delete.

If in doubt .... ask someone first.

sra

I think the best way to use Rootkit scanners is to keep a note of what they discover and then do a regular scan keeping a lookout for any changes.

So it's best to do your first scan now rather than wait till you think you're infected then try to figure out what it all means.

Never had to have a Rootkit scanner log checked but I'm sure the forums where you can submit them will be as friendly as when submitting hjt logs

pchelpman

sra wrote:

I think the best way to use Rootkit scanners is to keep a note of what they discover and then do a regular scan keeping a lookout for any changes.

So it's best to do your first scan now rather than wait till you think you're infected then try to figure out what it all means.

Good idea, boss.

sra wrote:

Never had to have a Rootkit scanner log checked but I'm sure the forums where you can submit them will be as friendly as when submitting hjt logs

indeed.... or maybe they could ask in this forum...