tjevans
join:2005-11-30
Hattiesburg, MS | SpySweeper found possible rootkits SpySweeper 4.5 found possible rootkits on my computer --- it was every document that is in my "My Documents" folder. I therefore think it's a false positive, but does anyone know why it would identify everything in that folder as a possible rootkit? | |
|
 
Cudni
La Merma - Vigilado
Premium,MVM
join:2003-12-20
Someshire | Re: SpySweeper found possible rootkits submit one flagged (if nothing of consequence is in the doc) to SpySweeper to check?
Cudni | |
|
Webroot_SS
join:2005-03-08
Denver, CO
| tjevans,
From the info you're providing this does seem like "false" detections. You can probably disregard that detection and I would suggest only using the "Sweep for rootkits" option if you are experiencing problems.
Like most of the other rootkit detectors, Spy Sweeper's "potentially rootkit-masked files" detection is not signature-based - it is essencially looking for descrepencies between what is on disk and what Windows sees. Because of this there are several situations where it can flag legitimate files as "potentially rootkit-masked files."
-Dan | |
|
 | Insder
There never was a second I in my name
Premium
join:2005-04-27
Salem, MA
| Re: SpySweeper found possible rootkits One of those situations being the Kaspersky Root-kit style NTFS streams (which actually aren't so bad being that they speed up virus scans a lot).
--
The one, the only, the Insder. :: Verizon Online DSL (2793/719) and Deer Alpha Firefox! | |
|
|
|
|
|
