Sophos offers free rootkit detection tool

IDG News Service - Sophos PLC has released a free tool to help PC users root out rootkits.

Called Sophos Anti-Rootkit, the software will detect and remove both known and unknown rootkits, and it will warn systems administrators if removing the software might harm operating system integrity.

Rootkits are a collection of tools used by hackers to gain administrative privileges on compromised machines. They are typically used to help hide other forms of malware -- keyloggers or Trojan horse programs, for example -- from antivirus software.

Late last year, Sony BMG Music Entertainment helped make rootkit a household word, after the company was forced to recall millions of CDs that used these cloaking techniques to hide its copy-protection software. Sony's rootkit, which was installed when customers tried to play CDs, actually compromised PC security. Hackers eventually released malicious software that used Sony's software to hide itself on a PC.

Sophos Anti-Rootkit works with the Windows NT, 2000, XP and Windows Server 2003 operating systems. The software features a graphical interface to help guide users through the process of detecting and removing the malicious software.

Since the Sony fiasco, the security industry has paid more attention to the rootkit problem, and there are now a number of free utilities designed to identify this type of software. Other tools include RootkitRevealer, GMER and IceSword.

Sophos Anti-Rootkit can be downloaded from the company's Web site.