How good is Winsonar

Discussion in 'other anti-trojan software' started by richrf, May 13, 2005.

Thread Status:
Not open for further replies.
  1. richrf

    richrf Registered Member

    Joined:
    Dec 11, 2003
    Posts:
    1,907
    Hi all,

    This is a pretty interesting program. Anyone look into it? Can it detect "hidden processes", e.g. rootkits?

    Rich
     
  2. bigc73542

    bigc73542 Retired Moderator

    Joined:
    Sep 21, 2003
    Posts:
    23,873
    Location:
    SW. Oklahoma
    you might want to look here
     
  3. nick s

    nick s Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    1,430
    Hi Rich,

    For me, it fails to spot a running instance of Hacker Defender 1.0. It also misses a remote administration server and a trojan backdoor cloaked by the rootkit. Winsonar's open ports tool did see the listening server ports. Interestingly, the rootkit survived removal by Microsoft's latest Malicious Software Removal Tool.

    Nick
     

    Attached Files:

  4. richrf

    richrf Registered Member

    Joined:
    Dec 11, 2003
    Posts:
    1,907
    Thanks for the info guys.

    Have a good weekend.

    Rich
     
Thread Status:
Not open for further replies.