Tuesday, February 2, 2010

Don't forget about rootkits!

I have a multi-tiered combination of security software that I run on my own computer and suggest to others. These include Avira anti-virus, Spybot Search & Destroy, and Malwarebytes. These tend to block most malware that comes onto my system or remove it fairly easily. One of the most troublesome pieces of malware, however, is also the most difficult to detect: rootkits. Regular methods do not suffice. Although there are programs designed to deal with rootkit detection, in order for them to recognize their full potential, the system drive has to be scanned when the operating system on it has not been booted. A live CD or USB boot is the best way to achieve this. The Windows XP, Vista, and 7 installation disks all have a diagnostic mode that you can boot into, although it is a command-line mode. A useful freeware program which can be downloaded from CNET is Gmer. It has a graphical interface, however, so booting into the Windows Recovery Console will not work. You will have to boot from a second hard drive to use it. Also, the program is not available for Linux. Perhaps this post will get you thinking about your system security, because just because you have anti-virus and anti-spyware software, that does not mean your system is safe. There could be other problems that are going undetected.

No comments:

Post a Comment