PDA

View Full Version : Rootkit bypasses ZoneAlarm Security Suite and NOD32 2.7(supposedly)...

CoolWebSearch
May 7th, 2008, 03:05 AM
I found this interesting info on Youtube.com
http://www.youtube.com/watch?v=Gm7WNcNPLKs

Please, see if that's true, but also note that he is using ZoneAlarm Security Suite 7.0 and NOD32 2.7 which means that he had to disable ZoneAlarm's Antivirus and Anti-Spyware to do that, and also the question how did he configure OSFirewall as well.
Any comments?
fax
May 7th, 2008, 04:07 AM
-{ Quote: "I found this interesting info on Youtube.com
http://www.youtube.com/watch?v=Gm7WNcNPLKs

Please, see if that's true, but also note that he is using ZoneAlarm Security Suite 7.0 and NOD32 2.7 which means that he had to disable ZoneAlarm's Antivirus and Anti-Spyware to do that, and also the question how did he configure OSFirewall as well.
Any comments?" }-

Uuuhm, instead of the music he could have better explained what is actually doing LOL....
You cannot even see which version of ZA is using! Looks like ZAfree anyway...

Cheers,
Fax
CoolWebSearch
May 7th, 2008, 04:37 AM
-{ Quote: "Uuuhm, instead of the music he could have better explained what is actually doing LOL....
You cannot even see which version of ZA is using! Looks like ZAfree anyway...

Cheers,
Fax" }-

Actually, if you look when he logs off you'll it says ZoneAlarm Pro is shutting down...
fax
May 7th, 2008, 05:33 AM
-{ Quote: "Actually, if you look when he logs off you'll it says ZoneAlarm Pro is shutting down..." }-

Yes, it does not mean its ZAPRO... ;)
But whats the point of this video... you can't even see the settings nor version used. So, sort of rub**sh test.

People here are arguing about professional testers and testing methods and we get this very 'profound' and 'detailed' youtube demonstration. LOL

I'll pass on this...

Cheers,
Fax
computer geek
May 14th, 2008, 04:26 PM
I agree with fax on this, he could have just put it in game mode.
Escalader
May 14th, 2008, 09:02 PM
FWIW, I also agree.

Raw data off a youtube site is not worth anything. If a rootkit had bypassed both these mainstream products we would have many more very different sources of information about it.

This is FUD again.