View Single Post
Old 02-10-06, 03:03 PM   #70
SUBMAN1
Rear Admiral
 
Join Date: Apr 2005
Posts: 11,866
Downloads: 0
Uploads: 0
Default

Quote:
Originally Posted by Gizzmoe
Quote:
Originally Posted by SUBMAN1
Ahh, you're wrong... Last time I checked, it does an admirable job of hiding itself and making itself hard to find!
It does? It´s visible in the Non-PNP driver section like many other drivers and the three SF drivers in system32 are not hidden.

Quote:
Try and remove it even without 'special' software.
Never tried to remove it manually, that´s what the removal tool is there for. If I wanted to I could probably remove it manually, it doesn´t look too difficult.

Quote:
PS. You work for SF or something?
Yes. And I´ve also killed Bambie´s mother and Mahatma Gandhi.
Hahaha! Don't make me laugh! You should be nicer to Bambie's mother, but Ghandi - oh well.

Starforce is hidden as well as a rootkit can be hid without physically replacing a physical driver on the system. As far as I know, there is no way to actually 'hide' a driver. Simply looking at Device Manager does not show Starforce. Steps were even taken to make sure it does not appear in the default view - the only way to find it is to stumble across it in connection view (Make sure you turn on Show Hidden Devices - a little clue that it is hidden!!!). It does not show up as a service. It does not show up in add/remove programs. It is hidden so well that the PC Gamer office had no idea it was even there until they were told to look for it!

So, given the above evidence, how can you sit there with a straight face and say "It is not hidden"?

-S

PS. Oh an inkling of how you remove it manually (and this all that is actually known at this point) is posted above. It is not as easy as you describe by any means.
__________________
SUBMAN1 is offline   Reply With Quote