Looks like it might be made by Sysinternals guys.

http://sites.google.com/site/rootrepeal/

John Doe wrote:
> Looks like it might be made by Sysinternals guys.
>
> http://sites.googlxxxxxxxrootrepeal/

I am smelling some week old fish here....

Sjouke Burry <burryNULNULFOUR PPLLAANNEETT.NNLL> wrote:

> John Doe wrote:

>> Looks like it might be made by Sysinternals guys.

> I am smelling some week old fish here....

If you were a regular here, you might recognize the
"Sysinternals guys".
--




















> Path: news.astraweb.com!border6.newsrouter.astraweb.com!news.glorb.com!feeder.erje.net!xlned.com!feeder5.xlned.com!feed.xsnews.nl!border-2.ams.xsnews.nl!upload-1.xsnews.nl!10.10.60.13.MISMATCH!frontend-F10-13.ams.news.kpn.nl
> Date: Fri, 19 Aug 2011 22:52:33 +0200
> From: Sjouke Burry <burryNULNULFOUR PPLLAANNEETT.NNLL>
> User-Agent: Thunderbird 2.0.0.24 (Windows/20100228)
> MIME-Version: 1.0
> Newsgroups: alt.comp.hardware.pc-homebuilt
> Subject: Re: Another root kit detector utility
> References: <4e4ec291$0$32712$c3e8da3$9b4ff22a news.astraweb.com>
> In-Reply-To: <4e4ec291$0$32712$c3e8da3$9b4ff22a news.astraweb.com>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
> Content-Transfer-Encoding: 7bit
> X-Antivirus: avast! (VPS 110819-0, 08/19/2011), Outbound message
> X-Antivirus-Status: Clean
> Lines: 6
> Message-ID: <4e4ecd26$0$2561$703f8584 news.kpn.nl>
> Organization: KPN.com
> NNTP-Posting-Host: 77.167.140.224
> X-Trace: 1313787174 news.kpn.nl 2561 77.167.140.224 kpn/77.167.140.224:33859
>

John Doe wrote:

> Looks like it might be made by Sysinternals guys.
>
> http:// sites. g**gle. c*m/ site/ rootrepeal/

Nothing to do with SysInternals (or with Microsoft that acquired
SysInternals). That this a Google Sites site (just another freebie user
web page, like the old GeoCities) that happens to link to the
SysInternals forums. That doesn't lend any association of this program
to the well-respected SysInternals products. They also link to
GeeksToGo forums, and what software has that site produced? They're
*forums*. They could've also linked to WildersSecurity.com to further
enlarge their references of communities of users and experts.

You neglected to mention this is betaware.

"There is always some risk when scanning for rootkits."

Huh? Uh nuh. There is a risk when *eradicating* rootkits, not when
looking for them.

Doesn't look like anything I'll bother with.

VanguardLH <V nguard.LH> wrote:

> John Doe wrote:
>
>> Looks like it might be made by Sysinternals guys.

Some people might want to look up the English word "might".
It does not mean "in fact".

>> http://sites.google.com/site/rootrepeal/
>
> Nothing to do with SysInternals (or with Microsoft that acquired
> SysInternals).

Says who, MouthGuard? In fact, I got the reference from a senior
member on the SysInternals website.

If you had taken 0.08 seconds, MouthGuard, you would have found
about 7,070 results for "Sysinternals rootrepeal" (without the
quotes).

Or you could have searched the Sysinternals website and found 680
results in 0.25 seconds.

Instead of trolling for information, some people should ask.

And again, MouthGuard, I didn't say it was their product. And
unless you know whose product it is, you don't know whether they
had something to do with it.

> Doesn't look like anything I'll bother with.

Your mother bothers with it, MouthGuard.
--

















MouthGuard
> Path: news.astraweb.com!border6.newsrouter.astraweb.com!news.glorb.com!news2.arglkargh.de!news.albasani.net!.POSTED!not-for-mail
> From: VanguardLH <V nguard.LH>
> Newsgroups: alt.comp.hardware.pc-homebuilt
> Subject: Re: Another root kit detector utility
> Date: Fri, 19 Aug 2011 17:18:12 -0500
> Organization: 0.35MOA sniper at loose in Usenet
> Lines: 23
> Message-ID: <j2mnd5$1ef$1 news.albasani.net>
> References: <4e4ec291$0$32712$c3e8da3$9b4ff22a news.astraweb.com>
> Mime-Version: 1.0
> Content-Type: text/plain; charset="us-ascii"
> Content-Transfer-Encoding: 7bit
> X-Trace: news.albasani.net lhc+B/ZTNwEvDB3H2rG2Cd2oPw37KCxfk8spvuLVAOIz6jmBSMaruZyUlc7TnlrJrypi2/PYpsSmyv9HH5L72g==
> NNTP-Posting-Date: Fri, 19 Aug 2011 22:17:10 +0000 (UTC)
> Injection-Info: news.albasani.net; logging-data="l4RqxEv6ST7ErCft+N2/Mw+LgpKZ/xITs4s3M9nPSq0Uu87XFYzST/dpZF2JtMEmVXeASlOVhUahufB6CjLv+jNzOxbXnEkS2vc2Me7xRHiKzuBX4nJo5T2by0YFEm4Q"; mail-complaints-to="abuse albasani.net"
> Keywords: VanguardLH VLH811
> User-Agent: 40tude_Dialog/2.0.15.41
> Cancel-Lock: sha1:Bj4d5J1hrh/qkEQzi5mnIavpneY=
> X-MOTD: It is wiser to remain silent and let others ponder your ignorance than to speak and remove all doubt
>