Vba32 AntiRootkit 3.12.* beta

[AF_]

Originally Posted by Ashanta

How to check 'Use Antivirus kernel' ? It's grewed.

You have to download version with AV kernel. Here is direct link:
ftp://anti-virus.by/pub/beta/vba32arkit_full_beta.zip ( updated daily )

Where to analyze the Vba32 Antirootkit online ?

Sry, I didn't understand what do you mean ?

[Ashanta]

Thanks AF,

I'm sorry, my english is not good enough.

For ie, I have the vba32 log file. In which forum or website is possible to analyze or to check it ? Where can I submit the log file ?

Also, I've noticed that the scanning time is longer than previous versions.

[AF_]

Originally Posted by Ashanta

For ie, I have the vba32 log file. In which forum or website is possible to analyze or to check it ? Where can I submit the log file ?

You can submit the log file here or send it directly to us : arkit[_at_]anti-virus.by
Usually analysis is pretty much simple and could be done by yourself.

Also, I've noticed that the scanning time is longer than previous versions.

Yes, it's possible. We are improving disk access code every build ( mainly we're aiming stability of the tool ), sometimes it causes perfomance degradation. Pls check future versions

[Ashanta]

AF_,

Please check carefully my log file :

http://www.directmirror.com/files/V0HVLWAO


What grew and brown colors mean ?


Thanks in advance !

[Ashanta]

AF,

Any news, please ?

[Amin]

Is this the best Anti rootkit ?

[groft]

Originally Posted by Ashanta

AF,

Any news, please ?

Hello!
1) Your Hosts file ( C:\Windows\System32\drivers\etc\Hosts ) is modified. You changed it?
2) Second Volume boot record is "Non-standard VBR". Dump and send an arkit[@]anti-virus.by

[groft]

Originally Posted by a m i n

Is this the best Anti rootkit ?

You doubt it? Try it!

[Ashanta]

Hi groft,

1) Maybe my Antivirus or anti-malware program.
2) Ok, thanks. I will send my log file.

Originally Posted by groft

Hello!
1) Your Hosts file ( C:\Windows\System32\drivers\etc\Hosts ) is modified. You changed it?
2) Second Volume boot record is "Non-standard VBR". Dump and send an arkit[@]anti-virus.by

[groft]

Originally Posted by Ashanta

Hi groft,

2) Ok, thanks. I will send my log file.

Dump is created as:
1. start arkit
2. open in main windows "Tools -> Low-Level Disk Access Tool -> Volumes"
3. Select "Non-standard VBR"
4. In context menu select "dump"
5. Save & and send an arkit[@]anti-virus.by

[Ashanta]

Hi groft,

I've just sent the requested file, please check it.

Originally Posted by groft

Dump is created as:
1. start arkit
2. open in main windows "Tools -> Low-Level Disk Access Tool -> Volumes"
3. Select "Non-standard VBR"
4. In context menu select "dump"
5. Save & and send an arkit[@]anti-virus.by

[groft]

Originally Posted by Ashanta

Hi groft,

I've just sent the requested file, please check it.

Thanks, tomorrow answer

[AF_]

Originally Posted by Ashanta

Hi groft,

I've just sent the requested file, please check it.

I've checked both you log file and dump. You system is most likely clean. Non-standard VBR is our false positive and already fixed ( fix will be available in the next beta version )
Gray and blown are neutral colors. Usually brown means that object doesn't have any anomaly but also doesn't have a digital signature ( if applicable ). With gray color we mark objects that were unloaded from memory or don't exist on filesystem.
Hope that helps.

[Ashanta]

Big thanks AF_ and groft !

Great job ! Excellent program, go along with the next version

[Ashanta]

AF_ and groft

Check your mailbox, I submit a request, thanks.

[panz]

Originally Posted by AF_

You have to download version with AV kernel. Here is direct link:
-ftp://anti-virus.by/pub/beta/vba32arkit_full_beta.zip- ( updated daily )

hi, i'm getting the failed to load driver error also on windows 7 64 bit
i tried the above 'full installer' and it wont run on x64

any suggestions on how to get past that 'failed to load driver'
it seems to run otherwise when you hit start

not sure what functions are lost w/o the driver can you elaborate
also is there a download with the virus definitions intact other than this one that will run in x64 systems? thx n regards

[groft]

Originally Posted by panz

hi, i'm getting the failed to load driver error also on windows 7 64 bit
i tried the above 'full installer' and it wont run on x64

any suggestions on how to get past that 'failed to load driver'
it seems to run otherwise when you hit start

not sure what functions are lost w/o the driver can you elaborate
also is there a download with the virus definitions intact other than this one that will run in x64 systems? thx n regards

Look post #109