Printable View
As you might have noticed if you're downloading beta updates, last week added three plugins that'll improve our rootkit detection options.
If you've been using the beta updates, please give us some feedback on whether you've noticed anything irregular or any problems since the 3/5 update.
I had no problems and did not notice anything unusual using either of the following beta updates:
- ßDetection rules (beta) - Updated detections (23 KB) - 2008-03-05
- ßDetection rules (beta) - Updated detections (36 KB) - 2008-03-12
Added with edit:
ps: The following plugins were used during the scan:
- 2008-03-04 Plugins\Chai.dll
- 2008-03-05 Plugins\Fennel.dll
- 2008-02-26 Plugins\Mate.dll
- 2007-12-24 Plugins\TCPIPAddress.dll
I have the following plugins in use on two of three networked PC's. The third PC is using 1.5.2, is not set to download Beta files, but is otherwise up to date
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll
Have not noticed any difference in use and scans have all completed normally.
System on both PC's using SpybotSD 1.5.2 with Beta downloads is XP Home SP2 + all updates, AVG antivirus, ZA firewall, IE 7 and Spybot IE Browser helper and Teatimer both active. One PC is a desktop with NTSC format, the other a portable with FAT32 format.
No problems with the betas installed on my PC.
No problems with updates.
Checking for updates daily, running all betas and no problems, on 6 machines on a home network broken into 2 clusters of 3 machines. TeaTimer active on all. All Immunized after every update. All scanned weekly.
AVG on all machines. All IE7. Also, Firefox Beta 3 rev 4 on 2, Sea Monkey standard on 1.
Running 98/XP Home/XP Pro.
Thanks for the feedback, the plugins are public now :)
Just today, I upgraded from 1.5.1.19 to 1.5.2, and when I checked for updates, I noticed that the rootkit plugins downloaded successfully.
When does S S&D check for rootkits, and how can I tell when SS&D is checking for rootkits?
Can I get an answer to this, or am I in the wrong forum for asking this question?Quote:
Originally Posted by Who Knew
Ah sorry, missed that :)
You do not have to tell it anything; rootkit detections are now part of the standard update process, they're in the detection database along with all the other non-rootkit stuff for rootkitish products, for example when scanning for Zlob.