RD-CD:
Rootkit Detection CD

¤  News
¤  About
¤  Screenshots
¤  Requirements

¤  FAQ
¤  Download
¤  To Do List

¤  Contact
¤  Team Profile
¤  Resources

Thank You For Visiting!

You have found the home of RD-CD, an open source rootkit detection CD.

RD-CD was presented at NetSecure06 at Illinois Institute of Technology on May 8th, 2006. Thank you all who participated and came to see our demonstration!

Keep up to date on RD-CD through e-mail! Join our mailing list to receive updates on builds, news about RD-CD, and information about events direct to your e-mailbox.

- News: -

  <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <HTML> <HEAD> <TITLE></TITLE> <style type="text/css">  </style> </HEAD> <BODY> RD-CD New Build in Progress | 07/28/2006 - 11:20AM CST Thank you to everyone who came to our presentation at UniForum. We received much needed feedback on how to improve RD-CD and we have worked to implement many of these changes including major improvements to the GUI Mode. We are still negotiating the secure method of transferring the updated definition files for download from the website. (Thank you for your patience) Slax has a new version available, 5.1.7, and the next build will be based upon this version of Slax. We are currently in the testing phase and will be releasing the new and improved build soon ~ RD-CD Team Posted by <a /href="../contact.html" target="_parent">Webmaster</a> <hr> <a href="../screens.html" target="_parent">Screenshots</a> Section Added | 05/27/2006 - 8:08AM CST Now you can experience RD-CD before you even download! ~ RD-CD Team Posted by <a /href="../contact.html" target="_parent">Webmaster</a> <hr> Updated User's Manual | 05/03/2006 - 5:00PM CST An Updated User's Manual encompassing all changes to the build, is currently available to download! Here are the following changes: Additions <ul> <li>Added sub-TOCs for each major heading·</li> <li>Added new section on downloading the av_defs.mo</li> <li>Added new section on verifying with md5 </li> <li>Added updated command-line args & some scripts</li> <li>Added section on show versions</li> <li>Added sections on how to start GUI and CL Modes</li> <li>Added note about Linux scanning</li> <li>Added screenshots to graphically illustrate steps</li> <li>Added icons</li> </ul> Changes <ul> <li>Section 2.1.2 Starting a Scan: Live scan results now appear in separate window</li> </ul> Thank you all who waited patiently for this, enjoy! ~ RD-CD Team Posted by <a /href="../contact.html" target="_parent">Webmaster</a> <hr> New Build! | 04/27/2006 - 2:00PM CST A new build 264 is available to download with these changes to previous builds: Base (Slax) <ul> <li>Based on Slax 5.1.0 which includes the repaired UnionFS</li> <li>Manually added the captive-ntfs drivers (v 1.1.7) to the image</li> </ul> Scanning <ul> <li>New GUI code supports all mount features, report saving, better wording</li> <li>GUI mode will no longer prompt for updates 'prior' to booting GUI mode</li> <li>Smart Mount logic called automatically on Linux scans done via the GUI</li> <li>Fixed fixed font support for GUI</li> <li>Fixed default options to NOT select compression (causes systems with low memory and/or large compressed files to hang during scans)</li> <li>Changed GUI to exit back to logon screen and not perform a reboot on exit from GUI app</li> <li>Implemented Save Report function to save scan results to a flash drive</li> <li>Added LVM support</li> <li>Added proper support for fstab file formats including: /dev; /dev/vgname/lvname; LABEL=; UUID=;</li> <li>Smart mount logic now allows for a root partition to be passed. If specified (and found) the fstab file will be pulled from this partition</li <li>Change of delimiter field to ':' (from ';') for ease of use for cmd users</li> <li>Improved cmd line flow, complete process can be run by end user directly without running any scripts</li> </ul> Bugs, support, and other functionality <ul> <li>Changed Xorg defaults to 16 bit and vert refresh of 60-75 to support wider range of monitors</li> <li>Added disable-passwd-check to rkhunter scan, it was using the default password from build system </li> <li>Fixed bug where partitions were not mounted as RO (Read-Only) under certain conditions</li> <li>Smart mount logic to properly mount Linux partitions in hierarchy used under the 'live' system. Logic now shows proposed hierarchy and can mount in either the smart format or the default flat format (/mnt/pname)</li> <li>Enhanced GUI parsing</li> <li>Cleaned up graphics</li> <li>Changed default cmd line options to improve speed</li> </ul> ~ RD-CD Team Posted by <a /href="../contact.html" target="_parent">Webmaster</a> <hr> Website bug fixed | 03/24/2006 - 7:00PM CST Internet explorer was not displaying our website correctly. Text was centered where is wasn't supposed to be and font sizes differed from page to page. These errors in coding are fixed and IE and Firefox display comparably. ~ RD-CD Team Posted by <a /href="../contact.html" target="_parent">Webmaster</a> <hr> New Build! | 03/23/2006 - 9:00PM CST A new build is now available that fixes the various minor bugs that were reported in the previous build. Enjoy! ~ RD-CD Team Posted by <a /href="../contact.html" target="_parent">Webmaster</a> <hr> New User's Manual | 03/23/2006 - 3:00PM CST We have updated the User's Manual to include the /tmp bug and workaround ~ RD-CD Team Posted by <a /href="../contact.html" target="_parent">Webmaster</a> <hr> NetSecure06 Build Available | 03/20/2006 - 8:30AM CST The build that was handed out at NetSecure06 is available for download. Again, the RD-CD Team is meeting Thursday to create a new build. At the latest, this new build will be downloadable by Friday morning. ~ RD-CD Team Posted by <a /href="../contact.html" target="_parent">Webmaster</a> <hr> Grand Opening! | 03/16/2006 - 10:30PM CST A website is finally up for RD-CD. Thank you all who waited patiently while it was constructed. Unfortunately I cannot upload the build from NetSecure until Monday. ~ RD-CD Team Posted by <a /href="../contact.html" target="_parent">Webmaster</a> <HR> Announcements | 03/13/2006 - 12:00PM CST Two bugs have come to our attention: #1: The linux-based rootkit scan will not scan using Rootkit Hunter as expected. The CD handed out at NetSecure 06 and available to download does not correctly place the rkhunter .conf file in the proper directory, so it does not run properly. Solution: This error should not affect the performance of the Windows-based scanning or the other 3 Linux-based scan tools used. #2: If the '/tmp' folder used by ClamAV and BitDefender Console to unzip compressed files becomes filled, it may cause the GUI to 'hang' and scanning could be abnormally slow, (2 hours or more for a relatively small partition). Solution: This issue only affects low resource systems and/or while scanning a partition with large compressed files. The RD-CD team is meeting on the Thursday after Spring break to address both of these issues and to upload the resulting new build. If any more bugs happen to come up while using RD-CD you can report them to rdcd.bugs.report@gmail.com Please include your pseudo/name, return e-mail address, description of bug, total RAM, and type of system(Mac or PC) ~ RD-CD Team Posted by <a /href="../contact.html" target="_parent">Webmaster</a>

Home	\|	About	\|	Team

RD-CD:Rootkit Detection CD

RD-CD:
Rootkit Detection CD