Anti-rootkit programs

[micky77]

Anyone here use these programs ?. I have used AVG previously,and today I downloaded Sophos Anti RK.The scan was very quick 3.5 minutes,and thankfully came up clean.I suppose the trouble I would have, is  if something was found, would I delete it.

[FreewheelinFrank]

Do some research first, because some applications also use hidden processes.

A Google search should tell you if what was found really is a rootkit.

[philly12]

Those programs are okay...but there are some that are WAY better.  The top one seems to be GMER , which actually has videos on its site showing how GMER can detect rootkits that other programs cannot (interesting videos actually, it even shows the scans of the other antirookit programs).  Icesword is also an effective antirootkit.

[micky77]

Those programs are okay...but there are some that are WAY better.  The top one seems to be GMER , which actually has videos on its site showing how GMER can detect rootkits that other programs cannot (interesting videos actually, it even shows the scans of the other antirookit programs).  Icesword is also an effective antirootkit.

I've heard you can get FPs with GMER and Icesword is for more advanced users

[philly12]

They are both for advanced users, but they work

[DavidR]

Also see, anti-rootkit, detection, removal & protection http://www.antirootkit.com/software/index.htm. Try these as they are some of the more efficient and user friendly anti-rootkit tools.
- Panda Rootkit Cleaner - http://research.pandasoftware.com/blogs/images/AntiRootkit.zip.
- Trend Micro RootkitBuster - http://www.trendmicro.com/download/rbuster.asp
- F-Secure Blacklight may not always be available, http://www.f-secure.com/blacklight - Direct link, ftp://ftp.f-secure.com/anti-virus/tools/fsbl.exe

[mouniernetwork]

I think that GMER is quite good, and from what I understand so does Alwil 

Al968

[DavidR]

There are a number of anti-rootkit tools that are quite good but many aren't very user friendly and rely on the user having enough knowledge to decide what is or isn't a rootkit. They are a bit like hijackthis, in that they just provide data that you the user has to interpret.

GMER requires a knowledgeable user and avast/Alwil will be looking at making things more user friendly.