Rootkit Revealer 1.71

Description

Rootkit tool reveal the rootkit advanced way and runs on Windows NT 4 system and software rootkit successfully reveals many of the persistent roots for a way to defeat any hackers and is not intended hidden roots that reveal the hidden files or registry keys.

Since persistent rootkits work by changing API results so that a system view using APIs differs from the actual view in storage, RootkitRevealer compares the results of a system scan at the highest level with that at the lowest level. The highest level is the Windows API and the lowest level is the raw contents of a file system volume or Registry hive (a hive file is the Registry's on-disk storage format).

Thus, rootkits, whether user mode or kernel mode, that manipulate the Windows API or native API to remove their presence from a directory listing, for example, will be seen by RootkitRevealer as a discrepancy between the information returned by the Windows API and that seen in the raw scan of a FAT or NTFS volume's file system structures.

ads

Rootkit Revealer 1.71