RootkitRevealer doesn't work on WinXP64Pro ?

[Skybuck Flying]

Hello,

I tried RootkitRevealer v1.71 on Windows XP x64 Pro... but on startup it
crashes...

Possibilities:

1. Program doesn't work on X64.

2. Rootkit prevents RootkitRevealer from running ?

Bye,
Skybuck.

 

[Skybuck Flying]

Re: RootkitRevealer doesn't work on WinXP64Pro ?

Oh I see no support for x64

http://forum.sysinternals.com/forum_posts.asp?TID=10238&KW=x64

Oh well,

Hmm I'll run it on my other system which is win32 just for the fun of it !
hehe.

Bye,
Skybuck.

 

[Skybuck Flying]

Re: RootkitRevealer doesn't work on WinXP64Pro ?

Other computer found nothing alarming...

It did show lot's of KAVICHS but that's from virus scanner.

Only other thing which looked interesting was:

C36729C6-65AB-4A6F-8B96-53FF94E3A8D2

Which is probably SQL Debugger (?)

And then there is this sptd/cfg which is probably deamon tools thingy.

Bye,
Skybuck.

 

[Jim Carlock]

Re: RootkitRevealer doesn't work on WinXP64Pro ?


"Skybuck Flying" wrote...
: Other computer found nothing alarming...
:
: It did show lot's of KAVICHS but that's from virus scanner.
:
: Only other thing which looked interesting was:
:
: C36729C6-65AB-4A6F-8B96-53FF94E3A8D2
:
: Which is probably SQL Debugger (?)
:
: And then there is this sptd/cfg which is probably deamon tools thingy.

Looks like some sort of GUID. Look up it inside your registry. The
Windows registry editor could help you there.

--
Jim Carlock

 

[Carlos]

Re: RootkitRevealer doesn't work on WinXP64Pro ?

Jim:
That GUID can be found here:
http://msdn2.microsoft.com/en-us/library/bb201653.aspx
Carlos

"Jim Carlock" wrote:

>
> "Skybuck Flying" wrote...
> : Other computer found nothing alarming...
> :
> : It did show lot's of KAVICHS but that's from virus scanner.
> :
> : Only other thing which looked interesting was:
> :
> : C36729C6-65AB-4A6F-8B96-53FF94E3A8D2
> :
> : Which is probably SQL Debugger (?)
> :
> : And then there is this sptd/cfg which is probably deamon tools thingy.
>
> Looks like some sort of GUID. Look up it inside your registry. The
> Windows registry editor could help you there.
>
> --
> Jim Carlock
>
>
>

 

[Skybuck Flying]

Re: RootkitRevealer doesn't work on WinXP64Pro ?


"Jim Carlock" <news@localhost> wrote in message
news:e2CZWKz5HHA.4584@TK2MSFTNGP03.phx.gbl...
>
> "Skybuck Flying" wrote...
> : Other computer found nothing alarming...
> :
> : It did show lot's of KAVICHS but that's from virus scanner.
> :
> : Only other thing which looked interesting was:
> :
> : C36729C6-65AB-4A6F-8B96-53FF94E3A8D2
> :
> : Which is probably SQL Debugger (?)
> :
> : And then there is this sptd/cfg which is probably deamon tools thingy.
>
> Looks like some sort of GUID. Look up it inside your registry. The
> Windows registry editor could help you there.

I think it was "hidden" so it doesn't show in the registry ? (Didn't
check though )

Bye,
Skybuck.