Home

Download

Order

Support

?

Unreal has been introduced as "the new generation of rootkit technology" and "undetectable by all known antirootkit software".

Is it truth or not?

• Unreal hides his body to the NTFS stream: c:\:unreal.sys.
• Unreal hides the working driver from the drivers list.
• The real new thing in the Unreal is the simple trick.

  It doesn't hide its registry sub-key under "Services" registry key.

• Unreal terminates antiviral software that can detect it :-).

This causes the problem with auto detecting the Unreal using UnHackMe 4.0.

It's not real new thing!

The real answer is: updated UnHackMe (version 4.1) and RegRun Platinum 5.1 detects all rootkits that use the same trick.

Forecast!

I think the new generation of the rootkits will not hide their bodies too. In this case we will have the real problems in detecting :-).

Note! Anyway UnHackMe Pro detects ":unreal.sys" driver by analyzing bootlog file in manual mode.

Thank you the author of Unreal for their work.

UnHackMe will automatically remove Unreal after reboot.

Suggest you to use RegRun Platinum Edition to be sure that your rootkit's clear!

Good luck!

Dmitry Sokolov

Would you like to add your opinion?