[Meriadoc]

Seems there was a recent update,

2010-12-16

http://free.antivirus.com/rootkit-buster

download
Filename: RootkitBuster_3.60.1016.zip
MD5 checksum: 88b29adec76a4703605efb10c54d3d83

someone's been busy

[a_d_13]

Hello,

Thank you for the information. I have updated the download link in the list of antirootkits.

Thanks,
--AD

[Meriadoc]

new vm - tdl fail


not expected

[nullptr]

Actually TDL3 is one of the few things it will clean, but you need to reboot before scanning.

0xF84FD000 atapi_TM.sys 98304 bytes - original miniport infector.

0xF879A000 C:\WINDOWS\system32\drivers\i8042prt_TM.sys 53248 bytes - later TDL3

Note the driver name change after cure ;)

It detected sdra64, I can't remember what name that went by.
Apart from that, it's still more bluster than buster.

[Meriadoc]

Mm my bad I should have verified it but had little time, which is why I probably forgot to reboot...thanks nullptr :)