Freeware Listing: Rootkit
- Radix Anti-Rootkit
- License: Freeware

With Radix Anti-Rookit you can detect and remove rootkits that are hiding on your PC mostly going undetected by normal Anti-Virus and Anti-Malware Software. It uses a broad range of methods detecting and fixing the problems caused by rootkit and allow the power user to easily spot rootkits on a system. Detection methods range from detecting hidden Processes over detecting hidden Registry keys to complex detections of modified System Calls and hidden Streams, often containing Viruses or Spyware. Additional features include extensive logging , deletion of "locked" files and the possibility to save processes to the harddisk for further investigation.
- Publisher: Usec.at
- Date: 15-12-2007
- Size: 1500 KB
- Platform: Win2000, WinOther
- TDL Rootkit Detector
- License: Freeware

TDL Rootkit Detector is a handy application designed to identify if the TDL rootkit (also known as TDSS, Alureon, Olmarik) is affecting your system. Just run it and it will instantly display if the virus is present. You can than click to remove it. As simple as that!.
- Publisher: Greatis Software
- Date: 11-11-2012
- Size: 328 KB
- Platform: WinOther
- Sophos Anti-Rootkit
- License: Freeware

Free rootkit detection and removal tool * Detects and removes rootkits * Runs via GUI or command line * Uses standard Windows install and uninstall Rootkit scanning, detection and removal Our free software, Sophos Anti-Rootkit scans, detects and removes any rootkit that is hidden on your computer using advanced rootkit detection technology. Rootkits can lie hidden on computers and remain undetected by anti-virus software. Although new rootkits can be prevented from infecting the system, if you had any rootkits before you installed your anti-virus, they may never be revealed. Removing rootkits without compromising system integrity is particularly challenging and needs to be done with care.
- Publisher: Sophos Plc
- Date: 13-05-2012
- Size: 1331 KB
- Platform: WinOther
- Gromozon Rootkit Removal Tool
- License: Freeware

Users of Prevx already receive protection against new and emerging malware, including rootkits. If you are not a Prevx user and think you may have been infected by the Gromozon Rootkit please download our standalone removal tool by clicking the link below. It is highly recommended that once your machine is cleared of the infection, that you download and install Prevx to protect against future variants and infections. Prevx is a powerful, next generation, anti-malware suite which uses a unique community database to protect against emerging malware. What is Gromozon & how did it bypass my security tools? Unfortunately Gromozon is not a single infection, but a blended attack designed to bypass traditional anti-malware tools.
- Publisher: Prevx
- Date: 08-06-2012
- Size: 737 KB
- Platform: WinOther
- Rootkit Remover
- License: Shareware

McAfee Rootkit Remover will provide users with a stand-alone utility used to detect and remove complex rootkits and associated malware.
Currently it can detect and remove ZeroAccess and TDSS family of rootkits. McAfee Labs plans to add coverage for more rootkit families in future versions of the tool.
.
- Publisher: McAfee
- Date:
- Platform: WinOther
- W32/TDSS Rootkit Removal Tool.
- License: Shareware

cleantdss.exe will detect and remove W32/TDSS Rootkit completely, from your system. Download the cleantdss.exe and save it in a temporary directory. Double click on cleantdss.exe to execute it. Follow the user-friendly instructions to detect and remove the W32/TDSS Rootkit from your computer..
- Publisher: protectorplus.com
- Date:
- Size: 481 KB
- Platform: Linux, Unix, WinOther
- McAfee Rootkit Remover
- License: Freeware

McAfee Rootkit Remover is a stand-alone utility used to detect and remove complex rootkits and associated malware. Currently it can detect and remove ZeroAccess and TDSS family of rootkits. McAfee Labs plans to add coverage for more rootkit families in future versions of the tool.
MD5: e0e4e5504bfd6f48bd5ad1ae67e89f75
SHA1: aa6cdd61eff76c2893d1b23c27c549ca36ed1f5a.
- Publisher: McAfee, Inc.
- Date:
- Size: 460 KB
- Platform: Windows 7, WinOther, WinVista
- Lavasoft ARIES Rootkit Remover
- License: Freeware

The ARIES Rootkit Remover was desgined tolocate and permanently remove the Sony rootkit from the system The ARIES Rootkit Remover was desgined to locate and permanently remove the Sony rootkit from the system and disable the rootkit's ability to run once more after reboot.This standalone tool is a reliable, trustworthy, and safe way of removing the rootkit--unlike Sony's own rootkit remover that has been known to cause blue screens. This primarily protects consumers and ensures privacy. The tool is developed by Lavasoft in line with our common goals to steer computing environment towards better standards.
- Publisher: securityresponse.symantec.com
- Date: 20-08-2009
- Size: 369 KB
- Platform: WinOther
- AVG Anti Rootkit
- License: Freeware

AVG Anti-Rootkit is an advanced tool designed to detect and remove hidden objects known as Rootkits, from your computer The first beta version of the AVG Anti-Rootkit, an advanced utility designed to detect and remove hidden objects known as Rootkits, from your system, is now available for beta testing.AVG Anti-Rootkit can even remove Trojans and Rootkits that are hiding inside NTFS Alternate Data Streams.. ..
- Publisher: download.grisoft.cz
- Date: 02-08-2009
- Size: 413 KB
- Platform: WinOther
- Panda Anti Rootkit
- License: Freeware

Panda Anti-Rootkit is a program that uses latest generation technology to detect and remove rootkits Panda Anti-Rootkit was designed to be a small application that will use the latest generation technology to detect and remove rootkits on your system. Rootkits are programs designed to hide processes, files or Windows Registry entries. This type of software is used by hackers to hide their tracks or to insert threats surreptitiously on compromised computers. There are types of malware that use rootkits to hide their presence on the system. Rootkits use sophisticated techniques to avoid being detected by antivirus solutions.
- Publisher: research.pandasoftware.com
- Date: 02-08-2009
- Size: 303 KB
- Platform: Win2000, WinOther
- TDSSKiller
- License: Freeware

TDSSKiller is a utility that was created in order to provide you with a simple means of disinfecting any system that suffers from an infection from the malware family Rootkit.Win32.TDSS. A rootkit is a program or a set of programs designed to obscure the fact that a system has been compromised. For Windows operating systems, the term rootkit stands for a program that infiltrates the system and hooks system functions (Windows API). By hooking and modifying low-level API functions, such malware can effectively hide its presence in a system. Moreover, rootkits as a rule are able to conceal in the system any processes, folders and files on a disk as well as registry keys described in its configuration.
- Publisher: Kaspersky Labs
- Date: 02-09-2012
- Size: 1024 KB
- Platform: WinOther
- NoVirusThanks Anti-Rootkit
- License: Freeware

NoVirusThanks Anti-Rootkit is a sophisticated low-level system analysis tool whose main goal is to detect the presence of malware and rootkits. Hidden processes, hidden drivers, stealth DLL modules, code hooks etc. are just a few of the objects which can be detected in user space and system memory. NoVirusThanks Anti-Rootkit is a must-have for anyone seeking true 32-bit Windows NT kernel security and system threat analysis. The vast detection range of industry standard rootkits is truly amazing especially without compromising system stability even in the most hostile, malware-plagued environments.
- Publisher: NoVirusThanks.org Software
- Date: 08-06-2012
- Size: 1741 KB
- Platform: WinOther
- SanityCheck
- License: Freeware

SanityCheck is an advanced rootkit and malware detection tool for Windows which thoroughly scans the system for threats and irregularities which indicate malware or rootkit behavior. By making use of special deep inventory techniques, this program detects hidden and spoofed processes, hidden threads, hidden drivers and a large number of hooks and hacks which are typically the work of rootkits and malware. It offers a comprehensible report which gives a detailed explanation of any irregularities found and offers suggestions on how to solve or further investigate any situation..
- Publisher: Resplendence
- Date: 24-08-2012
- Size: 778 KB
- Platform: WinOther
- PMaxKiller
- License: Freeware

PMaxKiller is a small but powerful application that is able to scan your PC and remove any trace of the PMax rootkit infection. The term rootkit stands for a program that infiltrates the system and hooks system functions (Windows API). By hooking and modifying low-level API functions, such malware can effectively hide its presence in a system. Moreover, rootkits as a rule are able to conceal any processes, folders and files on discs as well as registry keys described in its configuration. Many rootkits install own drivers and services (hidden as well) into the system..
- Publisher: Kaspersky Labs
- Date: 27-11-2012
- Size: 102 KB
- Platform: WinOther
- ARKit
- License: Shareware

ARKit is an open-source rootkit detection library that has two components:
ARKitLib.lib - A Win32/C++ static library that exposes various methods to scan system and detect rootkits
ARKitDrv.sys - A device driver that actually implements methods to scan and detect rootkits
Process detection methods:
PID brute force (PsLookupProcessByProcessId)
TID brute force (PsLookupThreadByThreadId)
Handle table traversing (NtQuerySystemInformation)
DLL detection methods:
InMemoryOrderModuleList traversal in process' PEB
VAD tree walking
Process termination methods:
NtTerminateProcess/ZwTerminateProcess
NtTerminateThread/ZwTerminateThread for all threads of a process
Driver detection methods:
PsLoadedModuleList traversing
\Driver\...
- Publisher: Swatkat Thinkdigit
- Date:
- Platform: Win2000, WinOther, WinServer, WinVista
- Trend Micro RootkitBuster
- License: Shareware

Trend Micro RootkitBuster was developed to be a rootkit scanner that offers ability to scan for hidden files, registry entries, processes, drivers and hooked system services, and MBR. It also includes the cleaning capability for hidden files and registry entries.
Master Boot Record (MBR) rootkit detection, gives RootkitBuster the ability to detect hidden MBR content. It can spot all variants of MBR rootkit in the wild. MBR rootkits first began appearing in the wild late 2007. New variants continue to appear.
for Windows2K, XP, 2003, Vista, 7
.
- Publisher: Trend Micro
- Date:
- Platform: Win2000, Windows 7, WinOther, WinServer, WinVista
- SoundMGR
- License: Shareware

SoundMGR is a Windows rootkit project. It allows you to start and stop the service, hide a process by PID or Name, hide a file or a directory.
It uses Command line as an interface and requires you to provide the correct commands for it to function accordingly.
.
- Publisher: Lucazeau Alexis
- Date:
- Platform: WinOther
- RootQuest
- License: Shareware

Rootkits can be able hidden on computers and remain undetected by anti-virus software,by using our freeware will finds and removes any rootkit that is hidden on your computer using advanced rootkit detection systems.RootQuest is a good solution to detection and remove all rootkit that currenlty running as background services on computer system.Designed whit most compatible operating system,the program will do monitoring system proccess and remove all rootkit component whit fast and secure.A great tool for finding rootkits it also can prevent the installation and infection of many rootkits.The problem with rootkits is the fact that they can take over a computer and download and install other software,by whit using our rootkit detection technology there will no more a rootkit that currently running on processes.
- Publisher: comsentry.com
- Date:
- Size: 409 KB
- Platform: Win2000, WinOther, WinServer, WinVista
- RootkitRevealer
- License: Freeware

RootkitRevealer is an advanced rootkit detection utility. It runs on Windows NT 4 and higher and its output lists Registry and file system API discrepancies that may indicate the presence of a user-mode or kernel-mode rootkit. RootkitRevealer successfully detects many persistent rootkits including AFX, Vanquish and HackerDefender (note: RootkitRevealer is not intended to detect rootkits like Fu that don't attempt to hide their files or registry keys). If you use it to identify the presence of a rootkit please let us know!
The reason that there is no longer a command-line version is that malware authors have started targetting RootkitRevealer's scan by using its executable name.
- Publisher: Bryce Cogswell and Mark Russinovich
- Date:
- Size: 225 KB
- Platform: WinOther
- NoVirusThanks Anti-Rootkit Free
- License: Freeware

NoVirusThanks Anti-Rootkit is a sophisticated low-level system analysis tool whose main goal is to detect the presence of malware and rootkits. Hidden processes, hidden drivers, stealth DLL modules, code hooks etc. are just a few of the objects which can be detected in user space and system memory.
KEY FEATURES
*
Quick Report Scan (Easy Mode)
Detect SSDT & Shadow SDT Hooks
Detect Interrupt Descriptor Table (IDT) Hooks
Detect SYSENTER Handler Hooks
Detect Stealth IRP Hooks
Analyze Master Boot Record (MBR)
Detect Kernel Callbacks
Detect Kernel-Mode & User-Mode Hooks
Detect Hidden Drivers + Hardcore Scan
Detect Hidden Processes
Smart Process Termination + Delete File
Processes Behavioral Analysis
Detect Windows Message Hooks
Detect...
- Publisher: NoVirusThanksd-OC?D?
- Date:
- Size: 1658 KB
- Platform: WinOther
Rootkit: Freeware | All









