blacklight root kit detector

[toploader]

has anyone tried the free beta of this product?

http://www.f-secure.com/blacklight

[Bubba]

-{ Quote: "has anyone tried the free beta of this product?" }-I personally have not....but a Forum Search for blacklight turned up a number of recent threads concerning that program.

Just one for starters---> F-Secure BlackLight (http://www.wilderssecurity.com/showthread.php?t=86941)

[toploader]

thanks Bubba - not much enthusiasm by the looks of things - the mention of processguard smart is something i might look into - though what it's got against services.exe i'm not quite sure ;D

[triedit]

The problem with Blacklight is it's not that good at finding rootkits. You would do much better to use both RootkitRevealer from Sysinternals and UnHackme. Both of these are good rootkit detectors.

[toploader]

thanks triedit - are rootkits a big problem or a side issue do you think?

[controler]

They are becomming more mainstream these days.

Had to box up a laptop and send it back to the "IT" people because of a drive by rootkit install.

They were using Mcaffee and it did detect something but could not remove it.

controler

[Infinity]

-{ Quote: "They are becomming more mainstream these days.

Had to box up a laptop and send it back to the "IT" people because of a drive by rootkit install.

They were using Mcaffee and it did detect something but could not remove it.

controler" }-


hmm, maybe hips would help you in the future ;)

[controler]

Infinity

It is not I that needs HIPS but rather the company I work for.
LOts a young punk IT people LOL

Currenty I use WIndows Shared Computer Toolkit, PG * Boclean, RAMDisk on
test machine.

[Tyreman]

I know that "blacklight" removed some malware(or said it did!) from one machine but have never seen it detect or do anything else thereafter even after re dl'd any newer versions... if they were..