Icedrake Posted April 25, 2008 Share Posted April 25, 2008 Anyone know of a good freeware anti-rootkit program? Link to comment Share on other sites More sharing options...
Moderators Andavari Posted April 25, 2008 Moderators Share Posted April 25, 2008 These are currently freeware from reputable companies: * Panda Anti-Rootkit * Avira Anti-Rootkit Do note that if you switch to either Avast Antivirus Home Edition, or AntiVir PersonalEdition Classic that they include rootkit detection build-in. Link to comment Share on other sites More sharing options...
Coronagold Posted April 27, 2008 Share Posted April 27, 2008 The Avira AntiRootKit Tool (beta) finds more rootkit entries than AntiVir free does. Link to comment Share on other sites More sharing options...
Anthony A Posted April 27, 2008 Share Posted April 27, 2008 Here are two more. Both are no install apps. F-Secure Black Light. Link is at the bottom of the page http://www.f-secure.com/security_center/ Trend Micro Rootkit Buster http://www.trendmicro.com/download/rbuster.asp Link to comment Share on other sites More sharing options...
Tom AZ Posted April 27, 2008 Share Posted April 27, 2008 Just downloaded and tried to install Avira Anti-Rootkit Tool. However, couldn't get the Setup.exe file to open. Anyone else have that problem? Or, is there possibly another way to install it? Link to comment Share on other sites More sharing options...
Anthony A Posted April 27, 2008 Share Posted April 27, 2008 Just downloaded and tried to install Avira Anti-Rootkit Tool. However, couldn't get the Setup.exe file to open. Anyone else have that problem? Or, is there possibly another way to install it? Go with the two I linked or the Panda one. All 3 do not require an install. Link to comment Share on other sites More sharing options...
davey Posted April 27, 2008 Share Posted April 27, 2008 Just downloaded and tried to install Avira Anti-Rootkit Tool. However, couldn't get the Setup.exe file to open. Anyone else have that problem? Or, is there possibly another way to install it? Is it an executable also?As a matter of fact, aren't they all? davey Link to comment Share on other sites More sharing options...
Moderators Andavari Posted April 27, 2008 Moderators Share Posted April 27, 2008 Just downloaded and tried to install Avira Anti-Rootkit Tool. However, couldn't get the Setup.exe file to open. Anyone else have that problem? Or, is there possibly another way to install it? Maybe it was corrupted during the download. I've used it and removed it. The one I really like is Panda Anti-Rootkit, it will even check for an update before scanning. Many of the free anti-rootkit scanners haven't been updated for months! Link to comment Share on other sites More sharing options...
login123 Posted April 28, 2008 Share Posted April 28, 2008 IceSword is pretty good, but detects many processes that are harmless. Info and a download link: http://www.castlecops.com/t165203-IceSword...llustrated.html SpyBot S&D is getting into rootkit finding; they describe their present app as "a work in progress". Info and a download link: http://forums.spybot.info/showthread.php?t=24185 Sophos has a good one. You have to register to download it: http://www.sophos.com/products/free-tools/...ti-rootkit.html Sysinternals has a good one: RootKit Revealer. Info and a download link: http://technet.microsoft.com/en-us/sysinte...s/bb897445.aspx None of the above require installation, all are free. I just use them to find out whats going on in my computer...never have found anything ugly, thank goodness. Would have to get expert help if an actual rootkit showed up. You have to be careful, a lot of processes that look scary are really legitimate. Also I think you do have to install the Avira RKD, but no reboot is required. The CCleaner SLIM version is always released a bit after any new version; when it is it will be HERE :-) Pssssst: ... It isn't really a cloud. Its a bunch of big, giant servers. Link to comment Share on other sites More sharing options...
Moderators Andavari Posted April 28, 2008 Moderators Share Posted April 28, 2008 Also I think you do have to install the Avira RKD, but no reboot is required. It does have to be installed. Some of those others that claim they can just be ran without installing are actually adding stuff onto the system like adding a line into a Windows .ini file like win.ini, etc.,, or writing stuff into the registry. Link to comment Share on other sites More sharing options...
Anthony A Posted April 28, 2008 Share Posted April 28, 2008 IceSword is pretty good, but detects many processes that are harmless. Info and a download link: http://www.castlecops.com/t165203-IceSword...llustrated.html SpyBot S&D is getting into rootkit finding; they describe their present app as "a work in progress". Info and a download link: http://forums.spybot.info/showthread.php?t=24185 Sophos has a good one. You have to register to download it: http://www.sophos.com/products/free-tools/...ti-rootkit.html Sysinternals has a good one: RootKit Revealer. Info and a download link: http://technet.microsoft.com/en-us/sysinte...s/bb897445.aspx None of the above require installation, all are free. I just use them to find out whats going on in my computer...never have found anything ugly, thank goodness. Would have to get expert help if an actual rootkit showed up. You have to be careful, a lot of processes that look scary are really legitimate. Also I think you do have to install the Avira RKD, but no reboot is required. Some of those ones you mentioned are for advanced users. You need to know what you are doing with them. Panda and Blacklight are very easy to use. Link to comment Share on other sites More sharing options...
login123 Posted April 28, 2008 Share Posted April 28, 2008 It does have to be installed. Some of those others that claim they can just be ran without installing are actually adding stuff onto the system like adding a line into a Windows .ini file like win.ini, etc.,, or writing stuff into the registry. You are quite right, Andavari. But none of those I listed change the registry very much as far as I can tell, nor compromise performance after they are run. Sophos does add a stubborn key: HKLM\...\LEGACY_MEMSWEEP2, but no harm done as I can tell. Anthony_A is right too. You gotta know what you're doing. Expert help is called for if you think you have found a rootkit. If it was easy everybody would be doin' it. The CCleaner SLIM version is always released a bit after any new version; when it is it will be HERE :-) Pssssst: ... It isn't really a cloud. Its a bunch of big, giant servers. Link to comment Share on other sites More sharing options...
Coronagold Posted April 28, 2008 Share Posted April 28, 2008 Like me! Link to comment Share on other sites More sharing options...
LUSHER Posted May 1, 2008 Share Posted May 1, 2008 A couple more tools here http://wiki.castlecops.com/Lists_of_freewa...al_AV_companies Bitdefender, Mcafee, Sophos , AVAST, Spybot all also provide standalone antirootkits ... Link to comment Share on other sites More sharing options...
Moderators hazelnut Posted May 1, 2008 Moderators Share Posted May 1, 2008 Looks like DiamondsCS may be back up and running. A new beta from them is Deep System Explorer for finding new and future rootkits Info here http://www.diamondcs.com.au/dse/detections.php Some of you may recognise some of their windows freeware http://www.diamondcs.com.au/freeutilities.php Support contact https://support.ccleaner.com/s/contact-form?language=en_US&form=general or support@ccleaner.com Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now