[solved] Rootkit Settings

coolcool1227

Where do I find "Rootkits setting in Real Time Protection Module" of Bitdefender 2011?

alexcrist

Hello ONT,

If by Rootkit, you mean hidden files, then this type of scan cannot be performed in realtime, because of at least 2 major reasons:

1. rootkit scanning is a very complex and slow operation. It's not suitable for realtime scanning, but only for on demand scanning
2. rootkit scanning is a system-wide scan, not a per file scan. To find hidden (rootkit) items, all file system must be browsed by normal system requests and by advanced (more thorough) methods, compare the results of the 2 scans and detect any differences. This type of scan cannot be performed on just one file, nor can it be performed in realtime (for reason number 1: slow speed)

On the other hand, rootkit components can be detected in realtime (files detected as Rootkit.<name>, or anything containing the word rootkit in its detection name). And this is already done automatically, and there is no option to disable it.

Cris.