Security Toolbox: Hunting Hidden Files
The last stop on our processes tour concerns a new breed of malware called kernel-level rootkits. These tools permit malicious hackers to hide their tracks (and files) on an infected PC. Fortunately, several available programs will help you spot, and in one case, remove, these dangerous rootkit files.
For sheer analytical power, no competing rootkit remover can outperform Sysinternals' RootkitRevealer, which ferrets out files and Registry keys that might be associated with rootkits. The program is far from foolproof, however: Not all of the items it uncovers are malware. Learn how RootkitRevealer works, and how to use it effectively.
For point-and-click ease, F-Secure's BlackLight tool (free while it's in beta) puts the antivirus company's knowledge to use in a rootkit scanner that finds and disarms rootkit files on your hard drive. Though spartan in design, the tool won't leave a hidden Trojan horse in place.
Andrew Brandt is a PC World senior associate editor and author of the monthly Privacy Watch column.
Ad Choices