RootkitRevealer

RootkitRevealer: Free Utility for Detecting Stealthy Malware

A free utility that scans systems for rootkits and other malware, helping detect stealthy threats trying to evade detection on the system.

What is RootkitRevealer?

RootkitRevealer is a free rootkit detection tool from Microsoft that scans Windows systems for well-known rootkits, backdoors and other malware trying to hide themselves on a system. It works by comparing a baseline of an initially clean system vs the current state to identify discrepancies and changes that could indicate malicious threats.

RootkitRevealer runs both in user mode and kernel mode to check key areas attackers often try to modify to stay covert. Areas scanned include hidden files, locked files, registry settings, configuration values, process settings and more. Any threats or anomalies detected are flagged allowing them to be inspected and cleaned up appropriately.

Key features of RootkitRevealer include:

• Ability to detect and flag rootkits, backdoors, keyloggers, spyware and more
• Scans critical parts of the Windows system that threats try to modify
• Free utility from Microsoft for detecting stealthy malware
• Works by comparing current system state to baseline of clean system
• Runs in both user mode and kernel mode for broad coverage

While not a fully-fledged antivirus solution, RootkitRevealer serves as an important second opinion scanner to detect sophisticated threats that may fly under the radar of normal security software. Overall it provides another layer of protection and visibility for locking down Windows systems.

RootkitRevealer Features

Official Links