Sysinternals Releases RootkitRevealer

Thursday, 24 February 2005 by Michel Roth

Rootkit-based malware is becoming a growing security concern because this class of software can hide from most antivirus, antispyware, and system management utitilities. RootkitRevealer is a utility that scans a system's Registry and file systems using sophisitcated techniques to look for clues that indicate the presence of rootkits.

RootkitRevealer is an advanced root kit detection utility. It runs on Windows NT4 and higher and its output lists Registry and file system API discrepancies that may indicate the presence of a user-mode or kernel-mode rootkit. RootkitRevealer successfully detects all persistent rootkits published at www.rootkit.com, including AFX, Vanquish and HackerDefender (note: RootkitRevealer is not intended to detect rootkits like Fu that don't attempt to hide their files or registry keys).

Go to the download here.