Anti Rootkit

[Kuma]

Anti rootkit tools

:

raccolta di programmi per questo tipo di minacce

☺☺☺Gmer Download☺☺☺FREEGMER can detect....

hidden processes,

hidden services,

hidden files,

hidden registry keys,

hidden drivers,

drivers hooking SSDT,

drivers hooking IDT,

drivers hooking IRP calls.

☺☺☺AVG Antirootkit Download☺☺☺FREE It can even remove Trojans and Rootkits that are hiding inside NTFS Alternate Data Streams.

☺☺☺Darkspy 1.3 Download☺☺☺FREE DarkSpy is consisted of five parts:

1.Process:

Detect hidden process(even hide with FUTo...)

Force kill process(even Icesword) </h3> 2.Kernel Module:

Detect hidden kernel module(even hide with FUTo...)

3.File:

Detect hidden files

Force copy file

Force delete file

4.Registry function is not provided in test version.

5.Port:

Detect hidden ports

(Notice: DarkSpy don't allow any kernel debugger to run!)

Download test version (1.05)

DarkSpy 1.0.5 new features:

Enhanced Process/Driver Module detection.

Fixed some problems working with other security software(Karspersky...etc).

Enhanced process force terminate functionality.

Start to support multi-cpu and hyperthread.

Registry functionality added.

Help document added.

This is a Test Version

☺☺☺IceSword Download☺☺☺ FREE- IceSword has a Windows Explorer-like interface but displays hidden processes and resources that Windows Explorer would never show. It isn't a "click-here-to-delete-rootkits" product but a sophisticated discovery tool that can protect against sinister rootkits if used before they infect a machine.

☺☺☺ RootKit Unhooke Download☺☺☺FREE RootKit UnHooker features:Service Descriptor Table Hooks Detection and Restore, Ultimate Processes Detection, Ultimate Drivers Detection, System Call hook Detection, Drivers Dumping, Report generation

Panda Anti-Rootkit Download FREE Beta Hidden drivers- Hidden processes- Hidden modules- Hidden files- Hidden registry entries- SDT modifications- EAT hooks- Modification to the IDT- Non standard INT2E- Non standard SYSENTER- IRP hooks- And more..

McAfee - Rootkit Detective Download FREE Beta Designed to proactively detect the system objects like processes, files and registry that are hidden to the user.Provides information about all running processes in the system.Provides information about various system hooks like SSDT(System Service Descriptor Table) hooks, user/kernel IAT/EAT(Import/Export Address Table) hooks.Allows the user to clean/remove the malicious objects from the system by renaming/deleting the hidden files/registry.Allows the user to terminate the malicious processes.

Trend Micro - Rootkit Buster Download FREE Beta is a rootkit scanner that offers ability to scan for hidden files, registry entries, processes, drivers and hooked system service. It also includes the cleaning capability for hidden files and registry entries.

Sophos AntiRootkit Download FREE Sophos AntiRootkit can find the following Rootkits:......AFX Rootkit-Dice Rootkit-Generic compressed rootkit driver-Hacker Defender-Haxdoor backdoor Trojan-PCClient Backdoor-Port stealthing Rootkit-Process stealthing Rootkit-Rustok Rootkit-Settec Alpha-DISC copy protection-Vanquish-Rootkit-XCP2 Copy Protection

Aries Rootkit Remover [Download FREE Sony rootkit-style - Sony BMG's DRM protection software. About six million CDs currently have this software on December 2005.</h3>

Avira Rootkit Detection Attualmente in BetaTesting Avira Rootkit Detection (ARK) supports the detection of such hidden objects. If a hidden object is detected in the system the ARK shows it and offers supplementary options accessible by doing a right click on the object. Please note that in this beta version some of the actions performed on a hidden object are disabled

F-Secure BlackLight Download FREE The F-Secure BlackLight Rootkit Elimination Technology works by examining the system at a deep level. This enables BlackLight to detect objects that are hidden from the user and security software

Helios Download FREE Can operate in background scan mode, alerting the user to anomalies in real-time, Goes beyond detection to remove and de-fang rootkits, Inoculation features prevent the execution of rootkits and allow granular access control over files / folders / and drivers, Application integrity verification can check and restore applications that have been subverted.

Hidden Finder Download TRIAL VERSION HiddenFinder is a advanced security utility which instantly detects and kills the hidden processes and drivers. Hidden process and driver can be the result of sophisticated spyware, backdoor, rootkit and virus attack. HiddenFinder explorers the system in kernel level and shows all running processes and drivers including hidden.

Unhackme Download TRIAL VERSION remove many of the currently known Rootkits

ProcessGuard TRIAL VERSION

is a powerful new cutting-edge program that greatly increases

the security of your computer by preventing processes from being able to attack

each other. It is considered by experts to be a must-have program for all users

of Windows, and is the only program available that can prevent the infection of all known rootkit trojans.

The first and best anti rootkit software. 30$

[Kuma]

SysProt AntiRootkit 1.0.0.4 Beta

http://www.castlecops.com/zx/swatkat/SysProt.zip

http://download.freewarefiles.com/files/SysProt.zip

Size: 150KB

Publisher: Visit Website

Release Date: 2007-06-25

OS: Win 2000/XP/2003

A completely free software and uses multiple techniques to detect hidden processes, hidden drivers, hooks. Features:

• Hidden process detection and removal
  
• Hidden driver detection
  
• SSDT hooks detection and removal
  
• Kernel inline hooks detection and removal
  
• Sysenter hook detection
  
• Hidden "Services" Registry key detection and removal
  
• Ports information
  
• File system browser
  
• TCP/UDP Ports information
  
• Driver/Device objects information
  
• IDT information
  

[darksender]

SysProt AntiRootkit 1.0.0.4 Beta

http://www.castlecops.com/zx/swatkat/SysProt.zip

http://download.freewarefiles.com/files/SysProt.zip

Size: 150KB

Publisher: Visit Website

Release Date: 2007-06-25

OS: Win 2000/XP/2003

A completely free software and uses multiple techniques to detect hidden processes, hidden drivers, hooks. Features:

• Hidden process detection and removal
  
• Hidden driver detection
  
• SSDT hooks detection and removal
  
• Kernel inline hooks detection and removal
  
• Sysenter hook detection
  
• Hidden "Services" Registry key detection and removal
  
• Ports information
  
• File system browser
  
• TCP/UDP Ports information
  
• Driver/Device objects information
  
• IDT information
  

Salve perdonami se ti invado la pagina cosi,un consiglio secondo tè quale è il migliore tra questi antiRootkik che hai menzionato?

[Duca Bianco]

Salve perdonami se ti invado la pagina cosi,un consiglio secondo tè quale è il migliore tra questi antiRootkik che hai menzionato?

Il migliore come rilevazione rimane Gmer, anche se va interpretato.

GMER - il rilevatore di Rootkit