Rootkit detection

[elero]

Version 1.23 (July 23rd, 2008)

...

3. (ADDED) Better heuristics for rootkit detection.

What about the rootkit detection rate of MBAM compared to F-Secure Blacklight? Do i still need F-Secure Blacklight?

(also see http://www.malwarebytes.org/forums/index.php?showtopic=4131)

[exile360]

The quick answer is no, probably not as Blacklight happens to be one of the tools in my own toolkit that I track and it hasn't been updated at all in quite a long time and Malwarebytes' is being updated constantly, including it's detection of new rootkits. The long answer (although not really that long) is who knows? No one tool can detect all active malware on any given day and it never hurts to have a backup. Blacklight is a small tool that runs without installing anything, so why not keep it around for a second opinion? To be honest though, in my experience GMER is better at detecting rootkits than Blacklight, but it is not definitions based like Blacklight, so it won't tell you if it detected an actual malicious rootkit, you must have it analyzed by someone who knows how to interpret the output.