Friday, June 4, 2010

Project 2-1: Scan for Rootkits Using RootkitRevealer

In this practical, we are going to use a RootkitRevealer to scan for files that may contain Rootkits.

First we are going to open our IE and go to
www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx

next, download the file and run the RootkitRevealer.
once the program is running Click on "File" and next click on "Scan".
Let the RootkitRevealer scan through your Computer first.
Once done, at the bottom it would state "Scan Complete"


RootkitRevealer would also include discrepancies in the Registry and any of the discrepancies found may not neccessary be a Rootkit.

Reflection of Project 2-1:
In this Project, i learnt that i could find a freeware on microsoft which i could use regularly to scan my computer for rootkits. A rootkit is a software designed to gain administrator-level control over a computer system without being detected and this shows how rootkits pose a high-risk threat to users.

Posted by LoNeLyXx at 11:55 PM