Does Runscanner show any Keylogger etc?

Discussion in 'privacy technology' started by truthseeker, Aug 30, 2008.

Thread Status:
Not open for further replies.
  1. truthseeker

    truthseeker Former Poster

    Joined:
    Jan 26, 2008
    Posts:
    977
    When I run a program called RunScanner, it shows all running process.

    If I was infected with a keylogger etc, would it show up on RunScanner?
     
  2. RunScanner

    RunScanner Registered Member

    Joined:
    Feb 27, 2007
    Posts:
    58
    Most likely yes, except if it was an undetectable rootkit
     
  3. Longboard

    Longboard Registered Member

    Joined:
    Oct 2, 2004
    Posts:
    3,255
    Location:
    Sydney, Australia
    No offence intended ( I like RS :) )
    Ow: heh : my brain hurts >> is that a logic bomb or just an inverted tautology ;)

    On a more serious note: I had thought that RS was good at ferreting out hidden processes ??
     
  4. truthseeker

    truthseeker Former Poster

    Joined:
    Jan 26, 2008
    Posts:
    977
    So "undetectable rootkits" dont run in RAM? If not, then how can they do anything if they aren't running in memory?
     
  5. truthseeker

    truthseeker Former Poster

    Joined:
    Jan 26, 2008
    Posts:
    977
    Whats RS?
     
  6. Antarctica

    Antarctica Registered Member

    Joined:
    Feb 25, 2003
    Posts:
    2,207
    Location:
    Canada
    I guess RunScanner.:)
     
  7. BlueZannetti

    BlueZannetti Registered Member

    Joined:
    Oct 19, 2003
    Posts:
    6,590
    They are running in RAM. The typical scenario: the information provided to you by the OS (say via Task Manager) has been filtered by the rootkit to eliminate references it itself.

    Blue
     
  8. truthseeker

    truthseeker Former Poster

    Joined:
    Jan 26, 2008
    Posts:
    977
    Yeah, i thought that too, but the way he used RS in that context sounded like he was disagreeing with RunScanner.
     
  9. truthseeker

    truthseeker Former Poster

    Joined:
    Jan 26, 2008
    Posts:
    977
    can you please elaborate? Do you mean if I run RunScanner, it won't show as it somehow has made itself "invisible" in RAM?
     
  10. BlueZannetti

    BlueZannetti Registered Member

    Joined:
    Oct 19, 2003
    Posts:
    6,590
    First of all, take the time to read and understand what I wrote instead of popping off a few one liner questions without first digging deeper yourself.

    My response was to your comment on "undetectable rootkits", not Runscanner. You had initially asked:
    The initial response given was
    Which is a correct answer. If you are infected with a keylogger and said keylogger is a part of an "undetectable rootkit", RunScanner may not be able to provide a completely reliable reading of the processes running on your system. Rootkits hook into the OS system calls and will typically filter out self referential information. In a nutshell, that's how they hide.

    Think of it this way - consider a simple operation, say a directory listing. Getting that directory listing generally involves calling the OS and information is passed back to you from the OS. If a process is inserted between you and the base OS, it can filter/alter the information that is provided back to you. Clear enough?

    Blue
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.