From Wikipedia, the free encyclopedia
Jump to navigation Jump to search
Sysinternals RootkitRevealer
Developer(s)Bryce Cogswell and Mark Russinovich
Final release
1.7 / November 1, 2006; 14 years ago (2006-11-01)
Written inMicrosoft C++[1]:07:08
Operating systemWindows XP and Windows Server 2003
Size231 KB
Available inEnglish
TypeSecurity software
LicenseClosed-source freeware

RootkitRevealer is a proprietary freeware tool for rootkit detection on Microsoft Windows by Bryce Cogswell and Mark Russinovich. It runs on Windows XP and Windows Server 2003 (32-bit-versions only). Its output lists Windows Registry and file system API discrepancies that may indicate the presence of a rootkit. It is the same tool that triggered the Sony BMG copy protection rootkit scandal.[2]

RootkitRevealer is no longer being developed.[1]:08:16

See also[edit]


  1. ^ a b Russinovich, Mark; Margosis, Aaron (28 July 2011). Mark Russinovich and Aaron Margosis: Introducing Windows Sysinternals Administrator's Reference. Channel 9. Microsoft Corporation. Retrieved 10 November 2011.
  2. ^ Russinovich, Mark (31 October 2005). "Sony, Rootkits and Digital Rights Management Gone Too Far". Mark's Blog. Retrieved 10 November 2011.