Lab Notes

The Sysinternals guys have create Rootkit Revealer, a new freeware software application. Rootkit Revealer can, as its name suggests, detect the presence of rootkits (malware that that hides itself be means of hidden files and patched system APIs) on your system. The new software performs a low-level scan of the system, below the level at which a rootkit hides. It then performs a second, high-level scan and compares the results. Anything that shows up in the low-level scan but not the high-level is something that is trying to hide. Cool stuff, and you can't beat the price.