[solved] Rootkit Settings

Where do I find "Rootkits setting in Real Time Protection Module" of Bitdefender 2011?

Comments

  • alexcrist
    alexcrist
    edited September 2010

    Hello ONT,


    If by Rootkit, you mean hidden files, then this type of scan cannot be performed in realtime, because of at least 2 major reasons:


    1. rootkit scanning is a very complex and slow operation. It's not suitable for realtime scanning, but only for on demand scanning
    2. rootkit scanning is a system-wide scan, not a per file scan. To find hidden (rootkit) items, all file system must be browsed by normal system requests and by advanced (more thorough) methods, compare the results of the 2 scans and detect any differences. This type of scan cannot be performed on just one file, nor can it be performed in realtime (for reason number 1: slow speed)


    On the other hand, rootkit components can be detected in realtime (files detected as Rootkit.<name>, or anything containing the word rootkit in its detection name). And this is already done automatically, and there is no option to disable it.


    Cris.

  • Hi Cris


    Many thanks for clarification.

  • You are welcome.


    Cris.


    == CLOSED ==


    == Issue solved ==

This discussion has been closed.