webster72n
Fri Feb 09 11:03:38 CST 2007
Shane:
In response to the "rootkit" thing, which one would you recommend?
Never considered this one and 'am taking the slap on the wrist.
Harry.
"Shane" <shanebeatson@gmail.com> wrote in message
news:O9PWMrDTHHA.4844@TK2MSFTNGP03.phx.gbl...
> 'Loom!
>
> Heirloom wrote:
> > Hey Shane,
> > Yup, the Sony Rootkit is to what I was referring. As for
> > the rest of your post, I am not familiar with Blacklight and Ice
> > Sword (may have heard of them some time ago, some sort of anti-piracy
>
> No, they - as with RR - are anti-rootkit. Actually Sophos do one now, too.
> They're all the freeware anti-rootkit tools I'm aware of. Blacklight is by
> Frisk and IceSword is by a Chinese guy:
>
http://www.antirootkit.com/software/IceSword.htm.
>
> But the Sony one - which they've stopped now anyway afaik - is a minor
> problem compared to the ones the malware authors use. And distribute. I
> downloaded a few a year or so ago. Certain ones are very popular - and
> priced according to how undetectable they are! You know, one that one or
two
> AVs detect will be cheaper than one that none detect. imo the real danger
of
> the Sony rootkit was that perhaps it could be used by others with more in
> mind than just 'anti-piracy'. True the Sony move was appalling - and I
> wouldn't have gotten another Cybershot if I wasn't given one, found out
the
> software with it predated the rootkit and it wasn't - or wasn't yet -
> included with camera software - and Sony backtracked in the light of
public
> outrage. But it wasn't really malicious. There are plenty out there using
> 'better' rootkits, for genuinely malicious purposes - and you can go
> download one yourself right now if you want. <inverse-g>
>
> The overwhelming majority fail to open their eyes to the threat of
rootkits
> at all. I'm glad that you do. You are one of a mere handful of people I
> believe would take the greater threat under consideration, as opposed to
go
> off into that la-la-land where there's no need to look after yourself
> because there will always be a policeman at the end of the street (cyber
or
> otherwise)!
>
> I've pretty-much given up trying to wake people up to real
> computer-security. But, you know, if you can get a virus, you can get a
> rootkit.
>
> > stuff, maybe??) Anyway, RR may be NT only, but, I know I used CC and
> > Process Explorer with Me........earlier versions??? Too tired to
> > mess with it right now.
>
> Yeah, those are 9x, sure.
>
> Most of us here are using XP almost exclusively now - including me. At one
> time I'd have considered it ill-advised to use one OS while advising about
> another, but now I see it as necessary. If all the respondents here were
> still using ME, there would certainly be accurate advice, but there
wouldn't
> be so much sensible advice! So, this isn't a criticism - just an fyi.
>
> > I've got eight bikes in the shop, one is hanging from the rafters
> > with the wheels off (brake job). I have 43 bikes and one trailer
> > waiting for me!!
> > Heirloom, old and word travels fast
>
> Wonderful! Reminds me of what seems like only yesterday but is actually a
> worryingly-long time ago now! A time I wish had lasted forever. Besides
> doing the occasional full restoration for others - of which the Triumph
> Daytona at the site was the prettiest imo - and engine rebuilds, I used to
> do a lot of rewires. A bit like computers, I s'pose, in that the majority
> think electricity is magic!
>
> My Bonnie, though, I rebuilt in the living room - though I suspect your
shop
> is as comfortable. Certainly won't have the weather issues we have! I used
> to have a workshop with carpetting and a Chesterfield! And this device
that
> you made bubbles with. Did a lot of work there despite it.
>
> Shane
>
>
> >
> > "Shane" <shanebeatson@gmail.com> wrote in message
> > news:u1W4D88SHHA.920@TK2MSFTNGP05.phx.gbl...
> >> This is just a fleeting visit (back on dial-up) while I check
> >> something. Anyway, H, DVDs/CDs? You're talking about rootkits on
> >> removable media - such
> >> as, as Alias implies, the Sony DRM rootkit? I feel as though I've
> >> missed something in treating Rootkit Revealer - and Blacklight beta
> >> and Ice Sword too - as about detecting the really serious malware
> >> (ie what none of the anti-virus, anti-spyware or anti-what-have-you
> >> progs can) on one's C drive.
> >>
> >> Notice Sys-internals is now - apparently - a Microsoft subsidiary
> >> (I'd say 'partner', but there isn't really any such thing, is there?
> >> Mark Russinovich
> >> anyway appears to work for them now).
> >>
> >> Also - without going back through this thread (I have to go!) -
> >> Rootkit Revealer is NT only, afaik.. Certainly the other two are.
> >> For all I know this is one of those frequent questions about someone
> >> whose migrated from ME
> >> to XP (and that I fully concur is better answered on this group! But
> >> only really the New User-type questions), but if it's a ME
> >> question... Anyhow, gotta go.
>
>