The Active Network
ActiveWin Anonymous | Create a User | Reviews | News | Forums | Advertise | VBA in Excel | Users Online: 0  
 

neowin.net

Amazon.com

  *  

  Unreal: Rootkit Detectors / Bypassing, There are no best antirootkits
Time: 05:48 EST/10:48 GMT | News Source: *Linked Within Post* | Posted By: Kenneth van Surksum

The anti-rootkit detectors gone for a test and the result: Bypassed!

1. Rootkit Unhooker v3.01 BYPASSED
2. Rootkit Revealer v1.71 BYPASSED
3. F-Secure Blacklight BYPASSED
4. DarkSpy v1.05 BYPASSED
5. DarkSpy v1.05fixedbeta2 BYPASSED
6. IceSword v1.20 BYPASSED
7. GMER v1.012 BYPASSED
8. Helios v1.1a BYPASSED
9. SVV v2.3 BYPASSED
10. McAfee Rootkit Detective BYPASSED
11. Sophos AntiRootkit BYPASSED
12. TrendMicro RootkitBuster BYPASSED
13. AVG AntiRootkit BYPASSED
14. AVZ v4.23 ARK Module BYPASSED
15. BitDefender Rootkit Uncover BYPASSED
16. Panda AntiRootkit BYPASSED
17. Panda Tycan BYPASSED
18. modGreeper v0.3 BYPASSED
19. flister BYPASSED
20. UnHackMe BYPASSED
21. SEEM v4.x BYPASSED
22. SafetyCheck v1.5.x BYPASSED
23. Avira AntiRootkit BYPASSED
24. HiddenFinder v1.301 BYPASSED
25. RkDetector v0.6 BYPASSED

Details at http://forum.sysinternals.com/forum_posts.asp?TID=9630&PN=1

Read Only Comments
Return to News
  Displaying Comments 1 through 5 of 5
  This is an archived static copy of ActiveWin.com.
#1 By 2960 (72.196.195.185) at Monday, January 28, 2008 09:55:37 AM
I don't get the purpose of this, other than to give the criminals yet another way to hide their actions.


What am I missing?

TL

#2 By 97961 (122.162.23.42) at Monday, January 28, 2008 12:16:23 PM
I think TechLarry is right.

#3 By 2231 (72.5.151.4) at Monday, January 28, 2008 03:24:33 PM
I see it as little different than publicizing bombs and guns going undetected by TSA screeners.

A false sense of security helps nobody.

#4 By 12071 (203.185.215.144) at Monday, January 28, 2008 09:57:15 PM
It's nice to see that other people understand the effects of non-disclosure and it's definitely not to help out criminals! Now the users of those products can:
a) Blissfully continue on their way;
b) Change to a better product;
c) Install a secondary product which catches the items their current product misses.

#5 By 28801 (71.58.231.46) at Tuesday, January 29, 2008 06:03:36 PM
"It do not hide also a registry keys, so no registry keys are hidden!"

What, were the Babelfish servers down?






 

  *  
  *   *
 
replica watches