Comments on: Panda AntiRootkit Official Release

By: Pedro Bustamante

Pedro Bustamante — Mon, 04 Feb 2008 22:31:04 +0000

hoping to see a Vista working version

By: Pedro Bustamante

Pedro Bustamante — Mon, 28 Jan 2008 21:45:08 +0000

Yes this happens in certain Win2k configurations. Peter try booting with the “last known good configuration”. This should boot your system without the Pavark scan. If that doesn’t work boot the PC with NTFSDOS, BartPE or any other OS that allows you to change the file system, and delete the phooks.sys driver. Your computer should reboot normally after that.

By: Pedro Bustamante

Pedro Bustamante — Mon, 21 Jan 2008 15:27:59 +0000

I too got a blue screen on requesting an in-depth scan under Win2K. Rebooted last valid configuration etc., which activated a Pavark scan.
What causes this (what is “trying to write to read-only memory”), and is the scan that Pavark is now conducting in-depth?
You asked a previous contributor for more info on the system, but I don’t see any follow-up on the topic.
TIA – Peter

By: Pedro Bustamante

Pedro Bustamante — Wed, 02 Jan 2008 16:29:33 +0000

Well according to some stats Win98 and Windows NT are used in less than 0.1% of PCs nowadays:
http://research.pandasecurity.com/archive/Windows-Vista-spotted-in_2D00_the_2D00_wild.aspx
http://sunbeltblog.blogspot.com/2007/10/random-some-vista-adoption-numbers_256.html
But it’s not only a matter of barely used platforms. Also the most current rootkits do not work on these older platforms, so it really makes no sense investing the effort in developing and maintaining a product specifically for these.

By: Pedro Bustamante

Pedro Bustamante — Sat, 29 Dec 2007 03:18:21 +0000

I find it extremely disappointing that the AntiRootkit runs only on win2k + above!
Why do you treat the ‘elders’ this way??
Thomas W.

By: Pedro Bustamante

Pedro Bustamante — Fri, 21 Dec 2007 16:46:58 +0000

Yes Bob, it will run ok with your current AV. For best performance and detection do an in-depth scan with a reboot.

By: Pedro Bustamante

Pedro Bustamante — Wed, 19 Dec 2007 15:19:19 +0000

Will Panda antirootkit run okay with Avast (free edition) antivirus? I don’t want to add a problem, rather than see if one exists.

By: Pedro Bustamante

Pedro Bustamante — Mon, 03 Dec 2007 15:17:47 +0000

The problem with Vista is that the decision of whether a rootkit should be allowed to install or not is passed on to the enduser via User Account Control (UAC). You get a nice “should this be allowed to install?” question from Vista. However we all know that relying on endusers to make good decisions on security matters is not the solution at all… some will say “No” and some will say “Yes”. Even though right now there are no widely rootkit infected Vista systems, I’m that that in some time and with a little social engineering we’ll start seeing rootkitted Vista machines. I believe it was either Symantec or Joanna @ invisiblethings who released some research a few months ago about social engineering Vista’s UAC prompt.

By: Pedro Bustamante

Pedro Bustamante — Tue, 27 Nov 2007 19:59:33 +0000

A very useful and much needed tool. I inadvertently discovered rootkits while trying to clear a spyware infection on my machine – a suspicious unsigned “winlogon” process kept appearing (Windows Defender was very useful for this). I had 3 rootkits installed. UnHackMe removed two of them, but couldn’t remove the third. I reinstalled Windows XP and then discovered Panda Anti-Rootkit. I wonder if Vista is more resistant to Rookits than XP is. Also I wonder if Vista handles administration privileges more elegantly than XP does. Having a “limited” account in place probably would have prevented these problems in the first place, but accounts on XP are so cumbersome that noone ever uses them.

By: sammi

sammi — Thu, 22 Nov 2007 13:11:03 +0000

i realy want to try and see how effect is your antivirus because friends told me that it is good thank you for providing it