RUBotted?

Hi

I've heard someone over here state that RUBotted is "about the best you can get for the purpose of detecting botnet Trojans. Everything has to go through its network drivers, so no suspicious activity goes unnoticed. And the fact of the matter is that Trojans now comprise over 60% of all malware, with Storm pumping out hundreds of new variants a day."

And "RUBotted's chance of missing botnet activity are theoretically zero," because "RUBotted replaces Windows' network drivers with its own drivers. It doesn't simply intercept outgoing correspondence; everything has to go through it." so "This is why RUBotted can tell when there is a bot, even if it's masked by a rootkit. It might not give you a filename or a path, but at least it can give you a heads-up."

Can anyone confirm this? A few months before RUBotted was mentioned and Wilders was quite negative of it, so I'm not sure who's right.

Thanks

 

Well it does sound interesting, I would also like to know if this is really such a ground breaking method, or nothing new. Is this tech different from the way firewalls work?

 

RUBotted is still in beta, do a backup of your system before you try it.
http://www.trendsecure.com/portal/en-US/tools/security_tools/rubotted