Search the knowledgebase


Opera appears in RootkitRevealer scan results

Problem: Opera appears in the scan results when scanning your computer for rootkits with RootkitRevealer.

Cause: Files that are created or deleted while RootkitRevealer is running will be flagged as suspect due to the way the scanner works, even if they are not part of an actual rootkit. When the scan is started, it creates a list of files that are visible to Windows, and then it scans for files that are actually there. If you use a browser while the scanner is running, the browser will write to the disk cache, and RootkitRevealer will notice that there is a discrepancy between the files available before the scan and during the scan. You can verify this by creating an empty file while the scan is running. You will see these files in the scan results.

Solution: These files are not rootkits, so it is not dangerous to keep your browser running while scanning. However, it is recommended that you close all programs, including Opera, before running RootkitRevealer to avoid false positives.

Future versions of RootkitRevealer will be better at handling these kinds of situations.

Browse through articles in the same categories: security