They say it may bypass the firewall. Probably you should use a firewall that even windows doesn't recoginze. Additionally use something like sysinternals process explorer to see what processes are active. This BTW also allows to set several processes in sleep mode, and then kill them all at once. This will prevent typical rootkit behaviour to restart a killed rocess by another viral part of the rootkit.
But basicly I'd say let's get rid off those rootkit coders - I provide the guns. Got to add a smiley here ;)
But basicly I'd say let's get rid off those rootkit coders - I provide the guns. Got to add a smiley here ;)