Welcome Guest (Log In | Create Account)
New Member? Join for free.
RootRepeal Download

Sponsored Advertisement



Operating System:Windows XP/Vista/7
Can only be used on 32-bit operating systems.


Screenshots for RootRepeal

BleepingComputer Review:

RootRepeal is a rootkit scanner that scans for kernel-mode drivers, whether they are hidden, or if the driver file is hidden on disk.  It also has the ability to look for hidden files, hidden process, SSDT hooks, hidden services, and stealth objects.


Product Description from ad13:

RootRepeal is a new rootkit detector currently in public beta.  It is designed with the following goals in mind:

  1. Easy to use - a user with little to no computer experience should be able to use it.
  2. Powerful - it should be able to detect all publicly available rootkits.
  3. Stable - it should work on as many different system configurations as possible, and, in the event of an incompatibility, not crash the host computer.
  4. Safe - it will not use any rootkit-like techniques (hooking, etc.) to protect itself.

Currently, RootRepeal includes the following features:

  1. Driver Scan - scans the system for kernel-mode drivers.  Displays all drivers currently loaded, and shows if a driver has been hidden, and whether the driver's file is visible on-disk.
  2. Files Scan - scans any fixed drive on the system for hidden, locked or falsified* files.
  3. Processes Scan - scans the system for processes.  Displays all processes currently running, and shows if a processes is hidden or locked.
  4. SSDT Scan - shows whether any of the functions in the System Service Descriptor Table (SSDT) are hooked.
  5. Stealth Objects Scan - attempts to determine if any rootkits are active by looking for typical symptoms.
  6. Hidden Services Scan - scans for hidden system services.
  7. Shadow SSDT Scan - counterpart to the SSDT Scan, but deals mostly with graphics and window-related functions.

* - falsified files are files which have their size mis-reported to the Windows API.  Some rootkits use this to hide data.

RootRepeal is currently in public beta.  Whereas every effort has been made to ensure compatibility with every system configuration on Windows 2000, XP, 2003 and Vista, it cannot be guaranteed.  There is always some risk when scanning for rootkits.  Before running RootRepeal, please make sure you have backups of all important data and have saved all open documents.


Visitors who viewed this program also viewed:

Trend Micro RootkitBuster Logo

Trend Micro RootkitBuster

Trend Micro RootkitBuster is a program that will scan your computer for Rootkits...

RootkitRevealer Logo


RootkitRevealer is a rootkit scanner from Microsoft Sysinternals.  This pro...

Vba32 AntiRootkit Logo

Vba32 AntiRootkit

Vba32 AntiRootkit is an advanced Rootkit scanner from VirusBlockAda.  This ...

Panda Anti-Rootkit Logo

Panda Anti-Rootkit

Panda Anti-Rootkit is a free rootkit scanner from Panda Security. This program w...


Advertise   |   About Us   |   User Agreement   |   Privacy Policy   |   Sitemap   |   Chat   |   RSS Feeds   |   Contact Us
Tech Support Forums   |   Virus Removal Guides   |   Downloads   |   Tutorials   |   The Computer Glossary   |   Uninstall List   |   Startups   |   The File Database

© 2003-2015 All Rights Reserved Bleeping Computer LLC.
Site Changelog