It seems that the site hosting one of the popular rootkit detection programs is under DDoS. (news from AntiRootkit blog). So I’ve uploaded the file to my Google Pages account (good luck DDoS-ing Google, however they may take it down because bandwidth is money). While it is available, get it at:
- File size: 490698 bytes
- MD5: e7cd686bba055d887afe00a9b6658836
- SHA1: 6643aa8fef433950f172d29e7c6d95e6124aa65d
One last note: my personal opinion is that these tools (like GMER or IceSword) are too complicated to be used by most of the people (even most of the technical people), because you have to have intricate knowledge of the kernel architecture to understand the results.