Detecting rootkits?

How do you do it?

Alind

From: "Alind" <>

| How do you do it?

You can start with Sysinternals' RootKit Revealer
http://www.sysinternals.com/Utilitie...tRevealer.html

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

David H. Lipman

Alind wrote:

> How do you do it?

How about some more info? What OS are you talking about?

Michael

Michael J. Pelletier

On Sat, 25 Jun 2005 22:13:19 +0000, Alind wrote:

> How do you do it?

http://www.sysinternals.com/Utilitie...tRevealer.html

http://www.rootkit.nl/

http://sourceforge.net/projects/tripwire/

http://afick.sourceforge.net/

http://en.wikipedia.org/wiki/Rootkit

Regards
Gordon

Gordon Darling

Hi Alind - From my Blog, address in Signature below:


"Either run on-line at the first link or download (thus saving for future
use) and run the Microsoft Malicious Software Removal Tool, here:

http://www.microsoft.com/security/ma...e/default.mspx and here:
http://www.microsoft.com/security/ma.../families.mspx

This tool addresses a number of the worst virus and worm families/variants
including a number of the Hacker Defender rootkits. It is updated on the
second Tuesday of the month and should be re-downloaded and re-run then each
time as well as when you suspect problems."


--
Regards, Jim Byrd, MS-MVP
My, Blog Defending Your Machine, here:
http://defendingyourmachine.blogspot.com/

"Alind" <> wrote in message
news:
> How do you do it?

Jim Byrd

Alind Wrote:
> How do you do it?
Using http://www.haxorcitos.com/ficheros/RKDetectorv0.62.zip ,
http://www.rootkit.com/vault/fuzen_op/vice.zip and/or
http://www.rootkit.com/vault/joanna/...r_w2k_2.11.zip if we are
talking windows based.
Linux based the following can do some work
ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz (homesite
http://www.chkrootkit.org/). Instructions inside.

----
xsr
08eb d563 c78f 85a9 2f4b 571b 9177 22e6 65ad ac05
usenet [@] http://www.research-labs.net/

xsr

On Sat, 25 Jun 2005 18:11:55 -0700, "Jim Byrd"
<> wrote:

>run the Microsoft Malicious Software Removal Tool,

I'd rather not.


--
Jim Watt
http://www.gibnet.com

Jim Watt