|
Posted by =?Utf-8?B?UXVpZG51bmNTaW1jaGE= on August 14, 2006, 4:36 pm
If you were Registered and logged in, you could reply and use other advanced thread options Marek,
Sounds good. You should know that I am not an expert. Still, I have read
that one should be very careful with "free" software. Then again, I am
breaking another rule by visiting this site.
Let us know how the sysinternals (which is now apart of MS) tools compare to
the other free utilities.
Have a good day.
"Marek Kalisz" wrote:
> Good idea. Thanks. Those two programs were, however, reviewed and strongly
> recommended in one of the latest issues of the one of the compmagazines.
> But - too be on a safe side - I'll look into side you mentioned and try to
> use only those.
> Thanks for a tip.
> Marek Kalisz
> > Hello,
> >
> > First, I would suggest that you use a free tool from sysinternals. Even
> > the
> > website rootkits.com mention the value of these tools.
> >
> > Next, I have a question. If you are worried about rootkits, which usually
> > operate at the kernal ring level, why are you using a program from an
> > unkown
> > person? In otherwords, in order to detect rootkits, you have to have very
> > advance knowledge of the kernel level architecture of a windows OS and
> > understand machine language. In any case, the person who wrote that "tool"
> > to
> > eliminate the "rootkit" off of your computer is probably installing a
> > "rootkit" that has a covert port opened and a keylogger that is
> > intercepting
> > your keystrokes and sending then to some web based database.
> >
> >
> >
> > "Marek Kalisz" wrote:
> >
> >> After reading recntly in some magazine about rootkits and anti-tools I
> >> installed two: IceSword and GMER. GMER,
> >> http://www.gmer.net/
> >> written by some Polish guy, has clear enough menu/tab system and clear
> >> enough instructions. During first sweep it pointed already some rootkit
> >> bastard and - with Kaspersky - hopefully it was eliminated. However, no
> >> tool is ideal. The only one, as reviewer wrote, is IceSword, except -
> >> it's
> >> pure Chinese.
> >> http://www.xfocus.net/tools/200505/1032.html
> >> The author, supposedly, doesn't know even English at all. Menus/tabs are
> >> now in English but any help is eventually in Chinese
> >> (Mandarin/Cantonese -
> >> have no idea). So, gadget works somehow, shows something, the most
> >> important - is still unpenetrable to hackers, but...
> >> For a dummy, like myself, it's still out of use.
> >> Is there any other source beside Chinese instructing how to read IceSword
> >> results and deal with them?
> >>
> >>
> >>
>
>
>
|