NOD32 vs. running rootkits

Hi,
I have read this article http://www.eset.com/company/article.php?contentID=1401.

According to this:

So current version of NOD32 is able to detect even running rootkits?

 

Yes . NOD is excellent , isn't it ?

 

well, let's wait for an official answer from ESET stuff.
I'm not so sure what is that statement reffering to...

 

Well , not necessary because the OP asks :
So current version of NOD32 is able to detect even running rootkits?

And this is well known - the answer is yes
The answer is well shown in the article . Please, read carefully Andrew's words

http://www.eset.com/company/article.php?contentID=1401

 

It's not 100% right, but something is brewing.

 

I think you mean rootkits _trying_ to install, AH + defs works for those because I've never heard anything about NOD being able to detect and/or remove running rootkits.

 

Could it be V3?

 

NOD32 is always on the front of the AV technology...

 

Hope so....

 

Andrew:
We had to re-write significantly part of the engine. It wasn’t that we couldn’t detect these, but once they were installed, they were very difficult to detect. We had to develop a method that the root was installed on the system, that we would be able to see it. Traditionally, what we and other anti-virus companies does is hope that you’re on installed on the system and once someone tries to install a root kit, you can’t defend, because you can see the files at that point. But once the things are actually installed and in memory and running, then it can be very difficult. We actually updated the product there to deal with there.

 

Which means they updated the engine to detect them heuristically before getting installed.
And that is a known fact - The other one where they detect running rootkits.. I've never heard of it.

 

Neither I...

 

No problem

 

?

I read that, but since they didn't told nothing about that on the updates...

 

It's still about detecting them before installed. It's nothing like Blacklight or RootkitRevealer.

Don't get your hopes up, but if something is 'brewing', I'm sure it means detection of running rootkits...
(Only guessing of course).

 

Yep

 

I don't know Blacklight, but RootkitRevealer is not so good. I know better solution.