Rootkits, And How To Detect Them simple firewall or anti-spyware scanners are not enough

[Inspiron 0]

Firstly, here's a definately of a RootKit.

A set of software tools frequently used by a third party (usually an intruder) after gaining access to a computer system. These tools are intended to conceal running processes, files or system data, which helps an intruder maintain access to a system without the user's knowledge. Rootkits are known to exist for a variety of operating systems such as Linux, Solaris and versions of Microsoft Windows.

Hence from this defination, we know that RootKit is not something you would want on your computer.

 

RootKits were actually used since long ago. However it wasn't pretty common so many of us didn't know of RootKit's existance. Until when Sony used a RootKit built into their music CDs to restrict users from copying and ripping music from it, RootKits become more well-known. Also since then, we know that Sony is using something bad to control the music CD that you own. They are using a RootKit!

 

No fear. I've found a software from SysInternals that can detect RootKits that are hidden on your system. Won't be surprise, you can even find Microsoft RootKits installed on your computer when you do the next windows updates or verification.

 

RootkitRevealer

http://forums.xisto.com/no_longer_exists/

 

I find that public knowledge about the RootKits should be realised as companies are now using RootKits to control something without your knowledge. And the way of controlling might not be possible to detect with a simple Firewall or Anti-spyware scanners. Hence, a RootKit Revealer will help alot here. From then, we will also know which companies are trying to take control of our computers, and which companies that no longer should worth our trust.

Edited March 19, 2006 by Inspiron (see edit history)

[ghostrider 0]

You have to remember newer and better rootkits are being written all the time, and unlike rootkits, viruses can't make themseleves appear invisible like rootkits can. Its going to be awhile before we actually have a rootkit detector that works really really well, if we ever do.