Rootkit detection in ZASS

[broadley]

I've been using AVG Anti-Rootkit Free but see that AVG aren't updating the free version anymore. Can anyone tell me if the Zone Alarm Security Suite can handle rootkits or do I need something else (sorry, but free if possible).

I'm using Ad-Aware 2007, SpywareBlaster, and Windows Defender in addition to ZASS, but have my doubts whether they can protect me against rootkits.

[Train]

RootkitRevealer
http://technet.microsoft.com/en-us/s.../bb897445.aspx
Get when I need. Have not idea if it is upated or not. Did not bother to check that out.

[Broni]

F-Secure on-line scan is pretty good...

Run the F-Secure online scan for Viruses, Spyware and RootKits: http://support.f-secure.com/enu/home/ols.shtml

This scanner works with Internet Explorer only

* Go to the F-Secure Online Virus Scanner
* Scroll to the bottom of the page and click the Start scanning button. A window will pop up.
* Allow the Active X control to be installed on your computer, then click the Accept button
* Click Full System Scan and allow the components to download and the scan to complete.
* If malware is found, check Submit samples to F-Secure then select Automatic cleaning
* When cleaning has finished, click Show report (this will open an Internet Explorer window containing the report)
* Highlight and Copy (CTRL + C) the complete report, and Paste (CTRL + V) in a new reply to this post

If Automatic cleaning with Submit samples hangs, click Cancel, then New Scan

* When the cleaning option is presented, Uncheck Submit samples to F-Secure
* Click Automatic cleaning
* When cleaning has finished, click Show report (this will open an Internet Explorer window containing the report)
* Highlight and Copy (CTRL + C) the complete report, and Paste (CTRL + V) in a new reply to this post along with a fresh HijackThis log.

Note:

* This scan will only work with Internet Explorer
* You must have administrator rights to run this scan
* This scan can take over an hour so please be patient

[broadley]

I downloaded RootkitRevealer which seems to work OK. I've also bookmarked F-Secure in case I need it.

While I was updating Ad-aware 2007 to the 2008 version today I notice that this can also handle rootkits, but, I guess, having a few extra strings to my bow won't do any harm.

Incidentally, running Ad-aware 2008 to forever - much longer than the earlier version took. I began to wonder if something had gone wrong, but eventually it finished. Has anyone else notice this?