What is a RootKit?

Miscellaneous Forums/General Discussion/What is a RootKit?

The forum is locked. These are the original blitzbasic.com forums, kept so they can still be read. No new topics, replies or edits can be made here. To join in, head over to the Blitz3D+ forums.

afaik rootkit revealer is from sysinternals not from microsoft. It is also only a diagnose tool and can't remove or kill selfprotecting malware, where icesword can do. that said, you need to know what you do with icesword since it allows to actually remove anything.
an easier tool would be blacklight of f-secure,although it may miss a couple of things.
kits like vanquish for example can only be detected by browsing processes that have been autoloaded and/or used to bend system vectors and calls, eg. by dll injection.
Icesword may also allow you to prepare a list of processes that should be killed at one time, so a process cannot stay alive trough cloning itself.


See also this page:
www.invisiblethings.org