Rootkits tools

Rootkits tools

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Rootkits tools Marek Kalisz 08-06-2006
Posted by Marek Kalisz on August 6, 2006, 1:17 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
After reading recntly in some magazine about rootkits and anti-tools I
installed two: IceSword and GMER. GMER,
http://www.gmer.net/
written by some Polish guy, has clear enough menu/tab system and clear
enough instructions. During first sweep it pointed already some rootkit
bastard and - with Kaspersky - hopefully it was eliminated. However, no
tool is ideal. The only one, as reviewer wrote, is IceSword, except - it's
pure Chinese.
http://www.xfocus.net/tools/200505/1032.html
The author, supposedly, doesn't know even English at all. Menus/tabs are
now in English but any help is eventually in Chinese (Mandarin/Cantonese -
have no idea). So, gadget works somehow, shows something, the most
important - is still unpenetrable to hackers, but...
For a dummy, like myself, it's still out of use.
Is there any other source beside Chinese instructing how to read IceSword
results and deal with them?



Posted by =?Utf-8?B?UXVpZG51bmNTaW1jaGE= on August 11, 2006, 2:23 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello,

First, I would suggest that you use a free tool from sysinternals. Even the
website rootkits.com mention the value of these tools.

Next, I have a question. If you are worried about rootkits, which usually
operate at the kernal ring level, why are you using a program from an unkown
person? In otherwords, in order to detect rootkits, you have to have very
advance knowledge of the kernel level architecture of a windows OS and
understand machine language. In any case, the person who wrote that "tool" to
eliminate the "rootkit" off of your computer is probably installing a
"rootkit" that has a covert port opened and a keylogger that is intercepting
your keystrokes and sending then to some web based database.



"Marek Kalisz" wrote:

> After reading recntly in some magazine about rootkits and anti-tools I
> installed two: IceSword and GMER. GMER,
> http://www.gmer.net/
> written by some Polish guy, has clear enough menu/tab system and clear
> enough instructions. During first sweep it pointed already some rootkit
> bastard and - with Kaspersky - hopefully it was eliminated. However, no
> tool is ideal. The only one, as reviewer wrote, is IceSword, except - it's
> pure Chinese.
> http://www.xfocus.net/tools/200505/1032.html
> The author, supposedly, doesn't know even English at all. Menus/tabs are
> now in English but any help is eventually in Chinese (Mandarin/Cantonese -
> have no idea). So, gadget works somehow, shows something, the most
> important - is still unpenetrable to hackers, but...
> For a dummy, like myself, it's still out of use.
> Is there any other source beside Chinese instructing how to read IceSword
> results and deal with them?
>
>
>

Posted by Marek Kalisz on August 14, 2006, 3:36 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Good idea. Thanks. Those two programs were, however, reviewed and strongly
recommended in one of the latest issues of the one of the compmagazines.
But - too be on a safe side - I'll look into side you mentioned and try to
use only those.
Thanks for a tip.
Marek Kalisz
> Hello,
>
> First, I would suggest that you use a free tool from sysinternals. Even
> the
> website rootkits.com mention the value of these tools.
>
> Next, I have a question. If you are worried about rootkits, which usually
> operate at the kernal ring level, why are you using a program from an
> unkown
> person? In otherwords, in order to detect rootkits, you have to have very
> advance knowledge of the kernel level architecture of a windows OS and
> understand machine language. In any case, the person who wrote that "tool"
> to
> eliminate the "rootkit" off of your computer is probably installing a
> "rootkit" that has a covert port opened and a keylogger that is
> intercepting
> your keystrokes and sending then to some web based database.
>
>
>
> "Marek Kalisz" wrote:
>
>> After reading recntly in some magazine about rootkits and anti-tools I
>> installed two: IceSword and GMER. GMER,
>> http://www.gmer.net/
>> written by some Polish guy, has clear enough menu/tab system and clear
>> enough instructions. During first sweep it pointed already some rootkit
>> bastard and - with Kaspersky - hopefully it was eliminated. However, no
>> tool is ideal. The only one, as reviewer wrote, is IceSword, except -
>> it's
>> pure Chinese.
>> http://www.xfocus.net/tools/200505/1032.html
>> The author, supposedly, doesn't know even English at all. Menus/tabs are
>> now in English but any help is eventually in Chinese
>> (Mandarin/Cantonese -
>> have no idea). So, gadget works somehow, shows something, the most
>> important - is still unpenetrable to hackers, but...
>> For a dummy, like myself, it's still out of use.
>> Is there any other source beside Chinese instructing how to read IceSword
>> results and deal with them?
>>
>>
>>



Posted by =?Utf-8?B?UXVpZG51bmNTaW1jaGE= on August 14, 2006, 4:36 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Marek,

Sounds good. You should know that I am not an expert. Still, I have read
that one should be very careful with "free" software. Then again, I am
breaking another rule by visiting this site.

Let us know how the sysinternals (which is now apart of MS) tools compare to
the other free utilities.

Have a good day.


"Marek Kalisz" wrote:

> Good idea. Thanks. Those two programs were, however, reviewed and strongly
> recommended in one of the latest issues of the one of the compmagazines.
> But - too be on a safe side - I'll look into side you mentioned and try to
> use only those.
> Thanks for a tip.
> Marek Kalisz
> > Hello,
> >
> > First, I would suggest that you use a free tool from sysinternals. Even
> > the
> > website rootkits.com mention the value of these tools.
> >
> > Next, I have a question. If you are worried about rootkits, which usually
> > operate at the kernal ring level, why are you using a program from an
> > unkown
> > person? In otherwords, in order to detect rootkits, you have to have very
> > advance knowledge of the kernel level architecture of a windows OS and
> > understand machine language. In any case, the person who wrote that "tool"
> > to
> > eliminate the "rootkit" off of your computer is probably installing a
> > "rootkit" that has a covert port opened and a keylogger that is
> > intercepting
> > your keystrokes and sending then to some web based database.
> >
> >
> >
> > "Marek Kalisz" wrote:
> >
> >> After reading recntly in some magazine about rootkits and anti-tools I
> >> installed two: IceSword and GMER. GMER,
> >> http://www.gmer.net/
> >> written by some Polish guy, has clear enough menu/tab system and clear
> >> enough instructions. During first sweep it pointed already some rootkit
> >> bastard and - with Kaspersky - hopefully it was eliminated. However, no
> >> tool is ideal. The only one, as reviewer wrote, is IceSword, except -
> >> it's
> >> pure Chinese.
> >> http://www.xfocus.net/tools/200505/1032.html
> >> The author, supposedly, doesn't know even English at all. Menus/tabs are
> >> now in English but any help is eventually in Chinese
> >> (Mandarin/Cantonese -
> >> have no idea). So, gadget works somehow, shows something, the most
> >> important - is still unpenetrable to hackers, but...
> >> For a dummy, like myself, it's still out of use.
> >> Is there any other source beside Chinese instructing how to read IceSword
> >> results and deal with them?
> >>
> >>
> >>
>
>
>

Posted by Dustin Cook on January 26, 2007, 1:15 am
If you were  Registered and logged in, you could reply and use other advanced thread options
=?Utf-8?B?UXVpZG51bmNTaW1jaGE=?=

> Marek,
>
> Sounds good. You should know that I am not an expert. Still, I have
> read that one should be very careful with "free" software. Then again,
> I am breaking another rule by visiting this site.

One should be careful, regardless of whether or not the software is "Free"
or you paid for it. :)
--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - V2.1
web: http://bughunter.it-mate.co.uk
email: bughunter.dustin@gmail.com.removethis
Last updated: January 25th, 2007

Similar ThreadsPosted
XP bootable CD w/tools? December 18, 2007, 6:50 pm
Re: Is there a tools to clean Trojan-psw ? May 25, 2007, 2:13 pm
RE: Is there a tools to clean Trojan-psw ? June 23, 2007, 2:51 am
offline virus tools? September 6, 2008, 11:11 am
tools to test server Security September 24, 2005, 10:27 pm
Rootkits ? January 3, 2007, 6:33 pm
Need Spyware * Malware * Virus * Rootkits Etc September 24, 2006, 3:12 pm
Norton Enterprise AV - scan missing viruses, trojans, keyloggers, rootkits, etc??? April 12, 2007, 6:33 pm

The site map in XML format XML site map

Contact Us | Privacy Policy