Hi Folks,



That makes a lot of sense, looking at the root from the outside.



Any other rootkit attempts generate concerns. They tend to have to work on a low-level on your system, and the less low-level manipulation you have (even if in a "good cause") the more stable your system.



Also the small group of Russian anti-rootkit technophiles seem to be at war with one another, reading the history of the field does not give me confidence. I wonder how many of these guys might be "highest bidder" oriented, Microsoft affiliates one month, Thin Line Associates the next.



I like the occasional external view thing, probably using whatever is available in UBCD4. And if more is needed there, letting UBCD4 know.



Shalom,

Steven