RootkitRevealer 1.30 Question

After opening Rootkit Revealer, under 'options', should I have 'Hide standard NTFS metadata files' checked (as it is in its default settings) or should I uncheck it? And if I should leave it checked, why should I leave it checked? Thanks for any help with this, as i'm trying to better understand this great little app.

 

Hi rkkillah,

Metadata files are hidden files and will always be detected as such by RKR's techniques, whether or not a rootkit is present. Excluding them from the scan results gives you the option of eliminating obvious false positives.

Nick

 

Thanks Nick.

 

You're welcome. RKR was updated to 1.31 today. A minor program update with improved cleanup of temporary files.

Nick