Wednesday, November 02, 2005

Rootkits, DRM, and Windows Internals: a great post from Mark Russinovich

I've posted previously about Mark Russinovich from Sysinternals; almost everyone I know uses at least one of their amazing freeware utilities when debugging system level problems.

How useful are these tools? If the fact that they're free doesn't sell you immediately, Mark recently posted about some problems he encountered with Sony's DRM software on his blog, and it really gives a good look at how you can use Process Explorer, Autoruns, RootkitRevealer and Sigcheck together to solve difficult problems.

This post is a great read on many levels - it describes a methodology for conducting software detective work, shows off the Sysinternals utilities, and makes you think twice about leaving your 'Autorun CD' option enabled.

No comments: