Rootkits and AVs

Ut is really necessary to use a seperate rootkit detector, such as RKU or IceSword, when you're using an AV that has the abililty to scan for rootkits. For instance, I use VBA32 and it has an option, on its on-demand scanner, to scan for them. But, in general, if another solution needed?

 

It's up to the user, I think.
For instance, KAV and Avira have this option built-in for its on-demand scanning too. Nevertheless, in Avira's case you have to enable this option before the 'complete system scan' in order to make it work.
.

 

Some AV's scan for root kits by default. I suppose it does not hurt to use a separate scanner just in case your AV has been disabled by the rootkit.

 

in the case of drweb, there is no option to disable rootkit scanning, it does the all-in-one scan.

however, there is a standalone scanner, if any malware does shut the antivirus down completely.

cure it

cant recommend it highly enough.

i never understand the option to turn on/off rootkit scanning, surely all users will want to add it to their system scan.
--------
i aint sure how good the other stand-a-alone rootkit scanners are

 

No matter the option of on or off, Aviras is very good. Search the web. You also have the option of just scanning for rootkits by themselves.

 

im sure its fine jeff

but why do some avs have the option for on-off rootkit scanning, surely it should always be on?

 

Perhaps I should repgrase my question. Are ACs adequate enough at scanning, and cleaning rootkits, so that another standalone product is not needed. U understand there are going to be varying answers for this, but in general are AVs enough to protect against rootkits?

 

probably some good, some bad.

until a rootkit detect/removal test comes out people just wont know.

i have faith in mine tho

 

http://siblog.mcafee.com/?p=210

 

n8chavez,
I see in your sig that you're using HjT and Autoruns. Add IceSword and RkU to those tools.

 

Thank you for the suggestion. Please check your PM, because I do not want to take this thread OT.