What is rootkit protection, why don't all mobos have it, and is it a concern?

[yacoub]

Just wondering if this is something that's actually important enough to worry about and if so, why don't all motherboards have this protection?

Thanks.

 

[seemingly random]

http://technet.microsoft.com/e...nternals/bb897445.aspx

Rootkits are associated with the operating system rather than the hardware. Most virus checkers check for rootkits these days.

 

[yacoub]

the way it's discussed in article comments here, it sounds like it's related to the motherboard's BIOS and that there's some protection some motherboards offer that others don't?

 

[imported_Cooch]

Originally posted by: yacoub
the way it's discussed in article comments here, it sounds like it's related to the motherboard's BIOS and that there's some protection some motherboards offer that others don't?

Just what in the HELL are you talking about? Nowhere in the article does it mention that rootkits are related to BIOS. Seriously, put down the crack pipe and come back to sanity.

As Seemingly Random has already replied, rootkits are related to operating systems - NOT HARDWARE.

 

[seemingly random]

Originally posted by: yacoub
the way it's discussed in article comments here, it sounds like it's related to the motherboard's BIOS and that there's some protection some motherboards offer that others don't?

I didn't read the whole article but it might be discussing the possibility of the virus (rootkit) has attacked the mb bios in the past. I don't know how prevalent this is anymore. A virus has been known to modify the boot sector on the hard disk.

Just run a good virus checker and you should be ok. There are many, many threads here discussing them.

 

[yacoub]

Originally posted by: Cooch

Originally posted by: yacoub
the way it's discussed in article comments here, it sounds like it's related to the motherboard's BIOS and that there's some protection some motherboards offer that others don't?

Just what in the HELL are you talking about?

Uhm, read what I wrote in the topic summary: "I keep seeing someone ask if a given motherboard has it in the comments beneath that mobo's review".

If that's still not clear enough for you: I keep seeing someone leave comments beneath motherboard reviews recently done by Anandtech, asking them whether or not the BIOS has rootkit protection. I don't understand what that is in relation to the BIOS or why all motherboards don't have it, if it even exists and is a legitimate concern.

Seriously, put down the crack pipe and come back to sanity.

Tell that to the fellow who keeps asking about it, then, if it's not a legitimate concern. I was just asking because HE made me concerned.

Here, here's the latest example: http://www.easyscreens.info/gallery/20090830/3.gif
And he or someone else has asked this several times recently, to the point where it made me start this thread to wonder wtf they're on about.

 

[yacoub]

Never did get a straight answer about this...

 

[Zap]

Originally posted by: yacoub
Never did get a straight answer about this...

What is rootkit protection?
Rootkit
Protection against them just means something that doesn't allow or block their function.

Why don't all mobos have it?
I don't think that it is something that can be implemented in hardware as it is software that runs on targeted operating systems, thus mobos don't have them. If it can't run on hardware, then a motherboard can't protect against it. Note that the "virus protection" that some motherboard BIOSes have is different. AFAIK those just prevent changes to the MBR of hard drives, or something like that. If a particular rootkit needs to write to MBR to function, then I guess there can be BIOS protection for that particular type, but not others.

Is it a concern?
It concerns me as much as getting cavities. I know it exists (rootkits and cavities) and I know I'm susceptible to them. Pondering on the possibility of rootkits and cavities is just wasting brain cells. May as well worry about solar flares engulfing Earth or being struck by lightning.

 

[yacoub]

ok thanks

 

[Old Hippie]

Here, here's the latest example: http://www.easyscreens.info/gallery/20090830/3.gif

Now, there's a guy on crack. :laugh:

 

[Modelworks]

Rootkit protection aka boot sector virus protection has been in bios for over 10 years. It isn't deemed all that valuable as a virus protection method and some OS have trouble with it being there so most bios makers stopped bothering.

Here is a post way back in 1999 about problems using it.
http://web.inter.nl.net/hcc/J.Steunebrink/virwarn.htm

 

[piasabird]

Well the BIOS is software and it could be rewritten by some kind of virus or worm. One thing that could happen is that a bit of code that loads a virus could be put into the BIOS. Generally a rootkit is a description of some kind of software or middleware. It may not even be considered to be part of the operating system. In the past this kind of software could have been put at the beginning of a drive to enable large drives to be read. It could have been considered an enhancement between the BIOS and the hardware. Even though the BIOS could not read a large drive, it could still be read using other methods.