Rootkit Unhooker new version out

Rootkit Unhooker LE 3.8.388.590 SR2



May 02 2010

DiabloNova AKA EP_X0FF releases his latest version of RkU.

Includes very useful MBR check at SCSI level for Mebroot etc type rootkits

https://www.rootkit.com/blog.php?newsid=1019

Two download options, install and non install versions.

Thanks

 

Thx

heh heh
Prevx & NIS flagged as "suspicious"

http://www.kernelmode.info/forum/index.php

 

download links
http://www.rootkit.com/newsread_print.php?newsid=1019

 

is this program has a scaner or hips?

 

Installed the aggressive exe killing rogue Antispyware Soft then tried to open the stand alone version of RU.

On first attempt it was stopped from running but on the second attempt it did run even though the rogue threw up it's warning and it was easy to kill the rogue's process through RU's gui.

Thanks for pointing it out CloneRanger and this ones going into my cleanup arsenal.

 

cool how do i or where can i download it from?thanks

 

@Longboard

Yeah typical But we know the reason why, it's just a precaution, better safe than sorry

@jmonge

It's an on demand ARK = Antirootkit, hidden code etc software. Scanner = YES Hips = NO

See my link or pidbo's link right above ^

@Franklin

Glad you like it

Did you rename RkU before you ran it ? Good idea to do that

 

Is this a trustworthy program?

 

100% trustworthy

 

Thanks CloneRanger for update info. Does it work with x64 (TDL3 rootkit x64 goes in the wild)

 

No, 32 bit only and little point in porting it to x64.