RootkitRevealer: Information from Answers.com

Sysinternals RootkitRevealer
Developer(s)	Bryce Cogswell and Mark Russinovich
Stable release	1.7 / 2006-11-1; 3 years ago
Written in	Microsoft C++
Operating system	Microsoft Windows XP and Server 2003
Platform	Microsoft Windows
Size	231 KiB
Available in	English
Development status	Active
Type	Computer security software
License	Sysinternals EULA (Closed-source freeware)
Website	http://www.microsoft.com/technet/sysinternals/utilities/RootkitRevealer.mspx

RootkitRevealer is a proprietary freeware tool for rootkit detection on Microsoft Windows by Mark Russinovich at Sysinternals. It runs on Windows NT 4 and higher and its output lists Registry and file system API discrepancies that may indicate the presence of a user-mode or kernel-mode rootkit. It runs on Microsoft Windows XP (32-bit) and Microsoft Windows Server 2003 (32-bit).

It was the tool that first detected Sony's XCP rootkit.

External links

Official website

Microsoft security products

MS-DOS

MSAV (1993; Discontinued)

Windows client

Noncommercial	Windows Firewall (2001) · Baseline Security Analyzer (2004) · Malicious Software Removal Tool (2005) · RootkitRevealer (2006) · Windows Defender (2005; Superseded) · Safety Scanner (2006; Discontinued) · Microsoft Security Essentials (2009)

Commercial	Windows Live OneCare (2006; Discontinued)

Windows Server

ISA Server (2000) · Intelligent Application Gateway (2007) · ForeFront (2007) · System Center Data Protection Manager (2007) · Unified Access Gateway (Upcoming)