Freeware March 14, 2005 posted by Red

Root it out.

RootkitRevealer. Root Kit = nasty kind of malware. RootkitRevealer = detector. Definitely worth remembering.

The term rootkit is used to describe the mechanisms and techniques whereby malware, including viruses, spyware, and trojans, attempt to hide their presence from spyware blockers, antivirus, and system management utilities…RootkitRevealer is an advanced root kit detection utility. It runs on Windows NT 4 and higher and its output lists Registry and file system API discrepancies that may indicate the presence of a user-mode or kernel-mode rootkit. RootkitRevealer successfully detects all persistent rootkits published at www.rootkit.com

About the Author:

Red – who has written 10163 posts on The Red Ferret Journal.

Hi! Thanks for stopping by. Why not subscribe to our free RSS feed, Twitter or Facebook page and stay updated with more fab Ferret fun?

http://www.techforthetimid.com/ Peter Goudswaard

The bad guys can get around the RootKitRevealer (and apparently, others), avoid this by renaming the .exe to something else. Details HERE.
Red

Ah thanks Peter. Hmm..so yes you apparently do need to change the name of the rootkitrevealer.exe file to something ‘long and imaginative’. It’s definitely an arms race isn’t it, as they say on the forum.