How good is Winsonar

Hi all,

This is a pretty interesting program. Anyone look into it? Can it detect "hidden processes", e.g. rootkits?

Rich

 

you might want to look here

 

Hi Rich,

For me, it fails to spot a running instance of Hacker Defender 1.0. It also misses a remote administration server and a trojan backdoor cloaked by the rootkit. Winsonar's open ports tool did see the listening server ports. Interestingly, the rootkit survived removal by Microsoft's latest Malicious Software Removal Tool.

Nick

 

Thanks for the info guys.

Have a good weekend.

Rich