tjevans
join:2005-11-30
Hattiesburg, MS | SpySweeper found possible rootkits
SpySweeper 4.5 found possible rootkits on my computer --- it was every document that is in my "My Documents" folder. I therefore think it's a false positive, but does anyone know why it would identify everything in that folder as a possible rootkit? |
|
Cudni
La Merma - Vigilado
Premium,MVM
join:2003-12-20
Someshire | submit one flagged (if nothing of consequence is in the doc) to SpySweeper to check?
Cudni |
|
Webroot_SS
join:2005-03-08
Denver, CO
| reply to tjevans
tjevans,
From the info you're providing this does seem like "false" detections. You can probably disregard that detection and I would suggest only using the "Sweep for rootkits" option if you are experiencing problems.
Like most of the other rootkit detectors, Spy Sweeper's "potentially rootkit-masked files" detection is not signature-based - it is essencially looking for descrepencies between what is on disk and what Windows sees. Because of this there are several situations where it can flag legitimate files as "potentially rootkit-masked files."
-Dan |
|
tjevans
join:2005-11-30
Hattiesburg, MS
1 edit | reply to tjevans
[post deleted] |
|
Insder
There never was a second I in my name
Premium
join:2005-04-27
Salem, MA
| reply to Webroot_SS
One of those situations being the Kaspersky Root-kit style NTFS streams (which actually aren't so bad being that they speed up virus scans a lot).
--
The one, the only, the Insder. :: Verizon Online DSL (2793/719) and Deer Alpha Firefox! |
|
