Rootkit Kernel

Details:

Rating:  1.5	Subject Knowledge:  0.0
Size: 1 MB	Date Added: 2/12/2007
Author: Resplendence Software Projects	Last Update: 2/12/2007
License: Freeware	Price: $0
OS: Windows2000,WinXP,Windows2003

Summary:
RootKit Hook Analyzer is a security tool which checks if there are any rootkits installed on your computer which hook the kernel system services. This program will display all kernel services and the responsible modules for handling them.

Description:
RootKit Hook Analyzer is a security tool which will check if there are any rootkits installed on your computer which hook the kernel system services. Kernel RootKit Hooks are installed modules which intercept the principal system services that all programs and the operating system rely on.
If any of these system services are intercepted and modified it means that there is a possibility that the safety of your system is at risk and that spyware, a virus or other malware is active on your system. Kernel hooks are not necessarily bad, for system monitoring software and security tools often they are a necessary evil. However it is desired if kernel rootkit hooks are installed on your system that you can find out where they come from. This program will display all kernel services and the responsible modules for handling them, along with company and product information. If no hooks are active on your system it means that all system services are handled by NTOSKRNL.EXE, the principal base component of most Windows operating systems which is developed by Microsoft. All you have to do to find out what kernel hooks are installed on your system is press the Analyze button at the bottom of the screen. RootKit Hook Analyzer also allows you to view installed system modules and drivers with their base addresses as well as file and product information as well as the responsible companies.

New is support for Windows x64 editions. Windows x64 is protected with a feature called Patchguard which is supposed to block any type of hooking activity in the Windows kernel. Hackers have been able to circumvent this protection and Windows x64 kernel hooks may now be found in both malware as well as legitimate products.

The software is distributed as a free download.