Neowin.net - Sophos Anti-Rootkit 1.3.1

Sophos Anti-Rootkit 1.3.1

Posted by Mihai Asmanow on 24 August 2007 - 16:06 · 3 comments & 2440 views

The term rootkit is used to define a Trojan (or technology) used to hide the presence of a malicious object (process, file, registry key, network port) from the computer user or administrator. Removing rootkits without compromising system integrity is particularly challenging and needs to be done with care. Sophos Anti-Rootkit, finds and removes any rootkit that is hidden on your computer.

Key features

* Scans running processes, windows registry and local hard drives for rootkits.
* Identifies known rootkits and selects, by default, files for removal which will remove the rootkit component of the malware without compromising OS integrity.
* Allows users to remove unidentified hidden files, but does not allow removal of essential system files when hidden by an identified rootkit.
* Once the user has run a scan, the screen prompts the user through the necessary steps until every rootkit has been removed.
* Users can switch between the GUI and command-line functionality.
* Both context sensitive and command-line help are available.

Download: Sophos Anti-Rootkit 1.3.1 freeware

Screenshot: >> Click here <<

Link: Home Page

Hide additional information

About the Author
Full name: Mihai Asmanow
Forum name: Copernic
Contact: via forum PM
Submissions: Normal · Headline

Total votes: 0

Bookmark on del.icio.us

Advertisement

#1 Posted by YaZoR on 24 Aug 2007 - 17:19: Hmm, never impressed with Sophos, but shall certainly try this.

Anyone know if it's better than sysinternals rootkitrevealer available here: http://www.microsoft.com/technet/sysintern...itRevealer.mspx

?

o/

#2 Posted by Xenomorph on 24 Aug 2007 - 17:25: Rootkit Revealer found a rootkit on a system I was working on - but I've read it could miss some things.

I've been looking at other products like this Sophos one. Having multiple scanners for these types of things certainly couldn't hurt.

By their very nature, having something updated and recent may be the best defense.

#3 Posted by +BeLGaRaTh on 24 Aug 2007 - 20:39: Doesnt work with Vista

[1]

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Scroll to the Top