RootkitRevealer is an advanced
root kit detection utility. It runs on Windows NT 4 and higher and its
output lists Registry and file system API discrepancies that may
indicate the presence of a user-mode or kernel-mode rootkit.
RootkitRevealer can successfully detect all persistent rootkits
published at www.rootkit.com, including Vanquish, AFX and HackerDefender
