The history of rootkits will take us back to the earlier days of the computer. In the early days of computer when the DOS command line operating system was in use some computer viruses could hide themselves from the computer users and also from any anti-virus programs. They successfully could do this by intercepting the system calls that were responsible for file reading. They tempered the system with fake information. Their presence was so critical that even if you could see their presence in front of you the code that will be viewed was nothing but the legitimate codes. These viruses were named as ‘stealth’ viruses in those days.
But with the evolution of the computers and the presence of Windows instead of old operating system DOS made these viruses useless. They just could not continue hide themselves because they could not intercept the system calls in Windows easily. But this was not the end of the viruses also. Some sort of stealth viruses is capable of hiding their presence in the Windows also. They can work on Windows very well and can hide their presence more efficiently than the past days ‘stealth’ viruses. These type of viruses are called rootkits.
Most of the anti- viruses that are used these days cannot provide complete guaranty against the rootkits evil. Rootkit can highly install it to the system and can hide itself there. The problem that the anti-virus software faces is that when they try to detect the rootkits they are already active there and the program they use to detect and destroy the rootkits are already intercepted by the rootkits. Only some tricky tech support can save your computer from the menace.
With Microsoft’s Rootkit Revealer, a program that is intended for the administrators or developers fails to destroy the rootkits. It cannot detect the rootkits. It can only hint that something is hidden in the system. Rootkit Revealer could not remove the viruses as well.
The tech support experts suggest that you can use some other antivirus programs with a rootkit detection. You can use software like UnHackMe. It is a sort of antivirus that is compatible with other anti-viruses and it is designed in a way so that it can work nicely with other existing anti-virus software.
The tech support experts state that the uniqueness of the UnHackMe is that it does not fight with rootkits. Rather it fools the malicious rootkits by booting the operating system and by taking the system under their control before the rootkits can intrude. Since it is installed before anything else it watches the whole process of the Windows boot process. It can detect and destroy any rootkits attempts.
The tech support experts suggest that since UnHackMe ensures that there is no rootkits in the memory it becomes easier to detect and remove any further intrusion attempt by the rootkits. If the rootkits try to intrude the system UnHackMe can remove the rootkits. It does do by blocking the rootkits from getting loaded to the memory of your system and by passing the control to your regular anti-virus.
Article Source: http://EzineArticles.com/expert/James_Mark_Madison/551584