Author Topic: analysis report  (Read 5814 times)

0 Members and 1 Guest are viewing this topic.

July 28, 2014, 11:12:40 AM

cjojo22

  • Guest
analysis report
« on: July 28, 2014, 11:12:40 AM »
Some one could help me to analysis this report please?? I'm worried especially by the line "antirookits" .... Thanks

Reply #1July 28, 2014, 11:53:37 AM

Tigzy

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 957
  • Reputation:
    91
  • Personal Text
    Owner, Adlice Software
    • View Profile
    • Adlice Software
Re: analysis report
« Reply #1 on: July 28, 2014, 11:53:37 AM »
Hello

Please avoid multi-layered attachements (image in a docx in a zip)... You have text report, that's the best you can do.
Or, you could have put the image directly... Nevermind.

From what I can see, all is Green, so nothing to worry about.


Reply #2July 28, 2014, 02:17:41 PM

cjojo22

  • Guest
Re: analysis report
« Reply #2 on: July 28, 2014, 02:17:41 PM »
sorry I wanted to be precise  :) Ok so just to be sure, do you mean that antirookits found have been deleted? and Thanks for your answer

Reply #3July 28, 2014, 02:19:44 PM

Tigzy

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 957
  • Reputation:
    91
  • Personal Text
    Owner, Adlice Software
    • View Profile
    • Adlice Software
Re: analysis report
« Reply #3 on: July 28, 2014, 02:19:44 PM »
No, it means it DOESN'T have to be removed.
They are here for information only. More generally, antirootkit part is only informative. It's only flags.

- Green: hook is legit
- Orange: hook is potentially a malware (means unknown)
- Red: hook is a malware, or recognized as it.

Reply #4July 28, 2014, 03:24:13 PM

cjojo22

  • Guest
Re: analysis report
« Reply #4 on: July 28, 2014, 03:24:13 PM »
I think I got it. It's useless to delete them including the orange's one.  When I read what is a rookit I was worried, I nerver installed this program! Thank you

Reply #5July 28, 2014, 06:00:10 PM

Tigzy

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 957
  • Reputation:
    91
  • Personal Text
    Owner, Adlice Software
    • View Profile
    • Adlice Software
Re: analysis report
« Reply #5 on: July 28, 2014, 06:00:10 PM »
It's not necessarly a rootkit :)
That's just it has been detected by the antirootkit module... I know it's a bit fuzzy :D

Read this: http://www.adlice.com/kernelmode-rootkits-part-3-kernel-filters/