Nice tool for anomalies detection, much more powerful than most of the "classical" anti-rootkits.
Surprisingly stable: no BSoDs on my test machines since early beta releases.
A forum for reverse engineering, OS internals and malware analysis
@ redp
Thanks for the tool :) After allowing it through several of my security Apps i was able to run it. When it completed though it closed with no visable Log ? I expected to see one in the same folder i placed Wincheck. Where should it be ?
Also i got a FP from Avira !
Thanks for the tool :) After allowing it through several of my security Apps i was able to run it. When it completed though it closed with no visable Log ? I expected to see one in the same folder i placed Wincheck. Where should it be ?
Also i got a FP from Avira !
Attachments
Malware = If your names not down, you're Not coming in !
Just bad detect. I suspect because KeServiceDescriptorTable presents in import table ;)
wincheck writes to standard stdout, so just redirect it to file
wincheck writes to standard stdout, so just redirect it to file
Check Wincheck
wincheck writes to standard stdout, so just redirect it to fileWhat's the easiest way to do that, i'm no expert ;)
TIA
Malware = If your names not down, you're Not coming in !
run cmd.exe as administrator
type:
fullpath2wincheck > some.log
type:
fullpath2wincheck > some.log
Check Wincheck
run cmd.exe as administratorOK thanks :)
type:
fullpath2wincheck > some.log
Malware = If your names not down, you're Not coming in !