Quality Rootkit Detection Tools

kcnychief

??? ??? ?
Political Access
Joined
8 Apr 2005
Messages
16,950
I read a very nice article on Rootkit detection recently, and wanted to pass along some of the suggested scanners to others :)

F-Secure Blacklight:
https://europe.f-secure.com/blacklight/

GMER:
http://www.gmer.net/

HOOK Explorer: (actually checks to see if files have hidden themselves behind legit programs
http://labs.idefense.com/releases/previews/HookExplorer/

IceSword: Rumored to the best out there atm
http://xfocus.net/tools/200605/1162.html

Sysinternals RootKitRevealer:
http://www.sysinternals.com/Utilities/RootkitRevealer.html

I'm going to play with each one a bit and see how I like them :D
 
Hey KC i tried out both IceSword, HOOK Explorer did you manage to try out the other two?
 
I have made it a point to play with all of them on varying levels, good stuff :D
 
I've seen the Blacklight, but I am hearing very good things about Icesword.
 

Members online

No members online now.

Latest profile posts

Also Hi EP and people. I found this place again while looking through a oooollllllldddd backup. I have filled over 10TB and was looking at my collection of antiques. Any bids on the 500Mhz Win 95 fix?
Any of the SP crew still out there?
Xie wrote on Electronic Punk's profile.
Impressed you have kept this alive this long EP! So many sites have come and gone. :(

Just did some crude math and I apparently joined almost 18yrs ago, how is that possible???
hello peeps... is been some time since i last came here.
Electronic Punk wrote on Sazar's profile.
Rest in peace my friend, been trying to find you and finally did in the worst way imaginable.

Forum statistics

Threads
62,015
Messages
673,494
Members
5,621
Latest member
naeemsafi
Back