Rootkit Removal tools

yodasaswampthin · 03-28-2006, 09:12 PM

Hello everyone,
I know that I have been out of sight for awhile however last summer I started college for my Network Engineering degree. Anyway I am working on a research paper on rootkits and was hoping that you pro's have some trusted software that I can refer to in my paper. At least you may be able to send me in the right direction of what works. Many thanks in advance for your advice.

MicroBell · 03-29-2006, 01:27 AM

2 Well known tools we use to find rootkits....

RootKitRevealer

Please download Rootkit Revealer (link is at the very bottom of the page)

Unzip it to your desktop.
Open the rootkitrevealer folder and double-click rootkitrevealer.exe
Click the Scan button (bottom right)
It may take a while to scan (don't do anything while it's running)
When it's done, go up to File > Save. Choose to save it to your desktop.
Open rootkitrevealer.txt on your desktop and copy the entire contents and paste them here

BlackLight

Download and run Blacklight

Note that you must have local administrative privileges to run the program.

Click Scan. BlackLight will use Windows Explorer (the desktop process) to scan for hidden items. Your anti-virus software or personal firewall might display a warning that says Blacklight (blbeta.exe) is trying to manipulate the Windows Explorer process (explorer.exe). If you want to continue the scan, you should allow BlackLight to do this

When it finishes, click Next. You may get a screen similar to the picture below. Click on Close

BlackLight beta would create a log file "fsbl-<date-and-time>.log". By default, the log file is in the same directory as the executable. Please post the log

yodasaswampthin · 03-30-2006, 10:01 PM

Thanks for the information. I wiil give you credit in the paper if you like. Either way I am very apprecitave of your help.

03-28-2006, 09:12 PM	#1 (permalink)
yodasaswampthin Registered User Join Date: Nov 2004 Location: central florida Posts: 17 OS: xp pro	Rootkit Removal tools Hello everyone, I know that I have been out of sight for awhile however last summer I started college for my Network Engineering degree. Anyway I am working on a research paper on rootkits and was hoping that you pro's have some trusted software that I can refer to in my paper. At least you may be able to send me in the right direction of what works. Many thanks in advance for your advice. __________________ YODA If you don't learn something everyday you ain't trying

03-29-2006, 01:27 AM	#2 (permalink)
MicroBell Manager Emeritus - Security Center, Expert Analyst, Moderator - Security Team; Rangemaster, TSF Academy & Supporter Join Date: Sep 2004 Location: Carmichaels, PA-USA Posts: 6,963 OS: Windows 7	2 Well known tools we use to find rootkits.... RootKitRevealer Please download Rootkit Revealer (link is at the very bottom of the page) Unzip it to your desktop. Open the rootkitrevealer folder and double-click rootkitrevealer.exe Click the Scan button (bottom right) It may take a while to scan (don't do anything while it's running) When it's done, go up to File > Save. Choose to save it to your desktop. Open rootkitrevealer.txt on your desktop and copy the entire contents and paste them here BlackLight Download and run Blacklight Note that you must have local administrative privileges to run the program. Click Scan. BlackLight will use Windows Explorer (the desktop process) to scan for hidden items. Your anti-virus software or personal firewall might display a warning that says Blacklight (blbeta.exe) is trying to manipulate the Windows Explorer process (explorer.exe). If you want to continue the scan, you should allow BlackLight to do this When it finishes, click Next. You may get a screen similar to the picture below. Click on Close BlackLight beta would create a log file "fsbl-<date-and-time>.log". By default, the log file is in the same directory as the executable. Please post the log __________________ We Are The BORG Spyware KILLER and Adware Destroyer! Spyware/Adware Removal Tools Hijackthis Ad-aware SE Spybot Search&Destroy SpywareBlaster CWShredder

03-30-2006, 10:01 PM	#3 (permalink)
yodasaswampthin Registered User Join Date: Nov 2004 Location: central florida Posts: 17 OS: xp pro	Thanks for the information. I wiil give you credit in the paper if you like. Either way I am very apprecitave of your help. __________________ YODA If you don't learn something everyday you ain't trying