Root Kit Detection Utility

What’s a “root kit”? No, it isn’t something for your garden.

The term rootkit is used to describe the mechanisms and techniques whereby malware, including viruses, spyware, and trojans, attempt to hide their presence from spyware blockers, antivirus, and system management utilities. There are several rootkit classifications depending on whether the malware survives reboot and whether it executes in user mode or kernel mode.

That definition is from Sysinternals, who has made available a free root kit detection utility called RootkitRevealer.
Note that it doesn’t clean anything it finds, it simply reports it; so, this is useless for most PC users unless they have some knowledge about Window’s innards. Even then, you’ll have to know what results are acceptable, like $MFT.

Conclusion: Sysinternals probably had fun developing it, but for most users it’s useless because it doesn’t flag what’s malicious; its output is meaningless unless you know how Windows works.

About Jody

Family man, living in New Brunswick, Canada.
This entry was posted in internet & computers, software.
Bookmark the permalink.

One Response to Root Kit Detection Utility

  1. plumsauce says:

    plus, it has major problems running on NT4 where it reports almost everything as being suspect.

Leave a Reply

Your email address will not be published. Required fields are marked *

*


*

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Notify me of followup comments via e-mail. You can also subscribe without commenting.