RootKit Hook Analyzer 3.02

• License:

  Free

• Editor's Rating:

  5.0 stars

• Average User Rating:

  2.5 stars (out of 4 votes) Rate it!

• Downloads:

  11,411

• Operating Systems:

  Windows Vista, Windows 95, Windows Me, Windows XP, Windows 2000, Windows NT, Windows 98

• Additional Requirements:

  Windows 95/98/Me/NT/2000/XP/2003 Server/Vista

• Limitations:

  No limitations

• Date Added:

  January 03, 2008

• Previous Versions:

  Select a version RootKit Hook Analyzer 1.01

• Add to my Watch List

Publisher's description of RootKit Hook Analyzer

RootKit Hook Analyzer is a security utility which will check if there are any rootkits installed on your PC which hook the kernel system services. Kernel RootKit Hooks are installed modules that intercept the principal system services that all programs and the operating system rely on. Kernel hooks are out of fashion these days and not officially documented and considered deprecated by Microsoft. The pioneering heroes of the old days who discovered how to actually implement them have all adopted the new fashion of advising against using kernel hooks as a programming practice.

Often kernel hooks are unnecessary because there are documented ways that allow a programmer to achieve his goal. However in a lot of system tools such as monitoring and antivirus software, kernel hooks are the only available technique to get the difficult job done and thus an unavoidable necessary evil. Important is that if your kernel system services are hooked that you can find out which is the responsible software that makes use of these techniques. Inspired by all the discussions going on about the Sony CD protection rootkit, we have developed the RootKit Hook Analyzer. Version 3.02 includes unspecified updates.

See more CNET content tagged:

hook,

rootkit

Editor's review of RootKit Hook Analyzer

• 5.0 stars

• "RootKit Hook Analyzer"

• Reviewed by: CNET Staff
• Version reviewed: RootKit Hook Analyzer 3.02

This tool for experienced users will identify rootkits installed to hook the kernel system services. If that sounds like gibberish, this tool, though easy to use, isn't designed for you. With two tabs and three buttons, RootKit Hook Analyzer takes no time to learn. A short Help file attempts to explain what this application is designed to find, but it will be of little use to users not already familiar with the concepts.

Operating RootKit Hook Analyzer is a snap. Merely open the application and press the analyze button. In seconds, the plain text results window displays a list of all services. Those hooked to the kernel are displayed in red, but there's also an option with a quick click of a check box click to show only hooked services. The application includes a tool to stress test any found hooks. The tool simply checks if the hook performs proper parameter checking. Run the test and get a system crash and you're running poorly written software. It's up to the user to figure out how to resolve the results.

This application can't identify the product origin of all hooks. To help users see what is running on their system, a second tab lists all loaded modules. An export button will save the lists to a text file. Some testers reported the log file would occasionally fail.

Expert users will find RootKit Hook Analyzer a useful freeware tool for finding kernel hooks.

User reviews

• Average user rating: 0 stars Not yet available
• My rating: 0 stars Write review

• Showing 3 of 3 user reviewsSee all 3 user reviews
  This software version | All versions

• 5 stars

  Version: RootKit Hook Analyzer 3.02

  "It does what it says."

  by Junk_Mail on January 14, 2008

  Pros: I like that it tells you where and who the hooks are associated with.

  Was this review helpful? YES | NO

  Report this post Email this post Permalink to this post

  Reply to this review

• 4 stars

  Version: RootKit Hook Analyzer 3.02

  "IT'S GREAT, BUT WONT REMOVE THE LITTLE BUGGERS...."

  by pistei on January 10, 2009

  Pros: searches well and quick.easy.

  Cons: doesn't remove

  Summary: it's great, but just run a search and you can find ones that remove rootkits.
  
  Updated on Mar 1, 2009

  but........the review was installed on XP. and i've yet to be able to install it on vista.

  Was this review helpful? YES | NO

  Report this post Email this post Permalink to this post

  Reply to this review

• 1 stars

  1 out of 1 people found this review helpful

  Version: RootKit Hook Analyzer 3.02

  "Worthless program"

  by melachupan on October 21, 2008

  Pros: None that i could see.

  Cons: Will scan your PC, real fast scan, with a number of rootkits. If you want to remove them, this version won't allow you, you have to buy a program. I guess the list is inflated to induce you to buy the program.

  Summary: Rubbishware

  Was this review helpful? YES | NO

  Report this post Email this post Permalink to this post

  Reply to this review

• See all 3 user reviews Write review