Rootkit Detective nabs hidden malware
ConvergenceAsia staff
31/07/2007

McAfee has released Rootkit Detective, a new, free tool to help computer users clean their machines of rootkits.

Cybercrooks use rootkits to hide other nefarious programs on compromised PCs. Last year the number of rootkits hit 3,284 and has already more than doubled in the first half this year to 7,325. Since the initial trial release of Rootkit Detective in January, the application has been downloaded over 110,000 times.

Rootkit Detective was developed by Avert Labs, McAfee's global security threat and research organisation. It is a tool that lets computer users look under the hood of their PC operating system and could be used, for example, when there are signs of a compromise, such as a sudden slowdown or suspicious network activity. Rootkit Detective is available at: http://vil.nai.com/vil/stinger/rkstinger.aspx

Rootkit Detective uncovers hidden processes, registry entries and files and lets users safely remove or disable them upon system reboot. In addition, Rootkit Detective can scan the integrity of a PC’s kernel memory and display any modification, which may also point to a system compromise.

Using Rootkit Detective, consumers and businesses can submit samples to Avert Labs. After analyses, a signature for the rootkit is created and added to McAfee's client security products for enhanced rootkits detection and protection capabilities.

advertisement