RootkitRevealer

This article has multiple issues. Please help or discuss these issues on the talk page. (Learn how and when to remove these template messages)

This article needs additional citations for verification. Please help by adding citations to reliable sources. Unsourced material may be challenged and removed.
Find sources: – · · · scholar · JSTOR (June 2014) (Learn how and when to remove this template message)

The topic of this article may not meet Wikipedia's notability guidelines for products and services. Please help to demonstrate the notability of the topic by citing reliable secondary sources that are independent of the topic and provide significant coverage of it beyond a mere trivial mention. If notability cannot be shown, the article is likely to be merged, redirected, or deleted.
Find sources: – · · · scholar · JSTOR (June 2014) (Learn how and when to remove this template message)

This article relies too much on references to primary sources. Please improve this by adding secondary or tertiary sources. (July 2015) (Learn how and when to remove this template message)

(Learn how and when to remove this template message)

Sysinternals RootkitRevealer
Developer(s)	Bryce Cogswell and Mark Russinovich

Final release	1.7 / November 1, 2006; 15 years ago (2006-11-01)

Written in	Microsoft C++^[1]^: 07:08
Operating system	Windows XP and Windows Server 2003
Platform	IA-32
Size	231 KB
Available in	English
Type	Security software
License	Closed-source freeware
Website	technet.microsoft.com/en-us/sysinternals/bb897445

RootkitRevealer is a proprietary freeware tool for rootkit detection on Microsoft Windows by Bryce Cogswell and Mark Russinovich. It runs on Windows XP and Windows Server 2003 (32-bit-versions only). Its output lists Windows Registry and file system API discrepancies that may indicate the presence of a rootkit. It is the same tool that triggered the Sony BMG copy protection rootkit scandal.^[2]

RootkitRevealer is no longer being developed.^[1]^: 08:16

References[]

^ ^a ^b Russinovich, Mark; Margosis, Aaron (28 July 2011). Mark Russinovich and Aaron Margosis: Introducing Windows Sysinternals Administrator's Reference. Channel 9. Microsoft Corporation. Retrieved 10 November 2011.
^ Russinovich, Mark (31 October 2005). "Sony, Rootkits and Digital Rights Management Gone Too Far". Mark's Blog. Retrieved 10 November 2011.

v t Microsoft security products
Numbers in brackets are the years of the initial release of the product.
For Windows	Windows Firewall [2001] Baseline Security Analyzer [2004] Malicious Software Removal Tool [2005] Windows Defender [2006] Microsoft SmartScreen [2006] Microsoft Security Essentials [2009] Microsoft Safety Scanner [2011]
For Windows Server	Exchange Online Protection [2007] System Center Data Protection Manager [2007] Identity Manager [2010]
Discontinued	MSAV [1993] Threat Management Gateway [1997] OneCare Safety Scanner [2006] Unified Access Gateway [2007] Windows Live OneCare [2006] RootkitRevealer [2006] Enhanced Mitigation Experience Toolkit [2009]
Related topics	Data Execution Prevention Kernel Patch Protection Mandatory Integrity Control MS Antivirus (malware) User Account Control

This Microsoft Windows software-related article is a stub. You can help Wikipedia by .

RootkitRevealer

See also[]

References[]