At 01:56 PM 14/02/2006, Christopher Fisk wrote:
On Sat, 11 Feb 2006, Hayes Elkins wrote:
Christ, you act like rootkits are unbreakable.
http://www.sysinternals.com/Utilities/RootkitRevealer.html
"RootkitRevealer successfully detects all persistent rootkits
published at www.rootkit.com, including AFX, Vanquish and HackerDefender"
What about the ones not published?
Well, according to Systernals, it would take technology not yet seen
in a rootkit to get around Rootkit Revealer. It would have to be
specifically written to intercept RR calls to directly look at the
registry and hard drive files. So right now, it seems like a pretty good tool.
T
