I was wondering if anyone else has used Rootkit reveal from sysinternals?


http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx

More importantly I've been looking for some resources to compare my results with whats "normal"

thanks

Yes, and we have a number of experts here that analyze log files from RootkitRevealer, and many other rootkit discovery and removal tools. They also specialize in rootkit removal when one is present. Most of our 1st Responders also have experience using RootkitRevealer as a diagnostic tool as well as dealing with any rootkits that are found during the malware removal process.

See this forum here for more information on rootkits:

/f233-Rootkit_Revelations.html

And see this forum for more information on our activities helping members get rid of all forms of malware:

/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html

If you believe that you may have malware, including a possible rootkit, you should follow our Malware Removal and Prevention guide in our wiki here:

http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction

and seek help in our HJT Forum (the link above). If you simply want a RootkitRevealer log analyzed, post the log in the Rootkit Revelations forum, link above.

BTW, I am moving this thread to the Rootkit Revelations Forum, and leaving a link for you to follow here. So you can use this thread if you feel you want to post a RootkitRevealer log for review.