Icon of program: RootKit Hook Analyzer

RootKit Hook Analyzer for Windows

Download now

Used RootKit Hook Analyzer for Windows?

Editors’ Review

Download.com staff

This tool for experienced users will identify rootkits installed to hook the kernel system services. If that sounds like gibberish, this tool, though easy to use, isn't designed for you. With two tabs and three buttons, RootKit Hook Analyzer takes no time to learn. A short Help file attempts to explain what this application is designed to find, but it will be of little use to users not already familiar with the concepts.

Operating RootKit Hook Analyzer is a snap. Merely open the application and press the analyze button. In seconds, the plain text results window displays a list of all services. Those hooked to the kernel are displayed in red, but there's also an option with a quick click of a check box click to show only hooked services. The application includes a tool to stress test any found hooks. The tool simply checks if the hook performs proper parameter checking. Run the test and get a system crash and you're running poorly written software. It's up to the user to figure out how to resolve the results.

This application can't identify the product origin of all hooks. To help users see what is running on their system, a second tab lists all loaded modules. An export button will save the lists to a text file. Some testers reported the log file would occasionally fail.

Expert users will find RootKit Hook Analyzer a useful freeware tool for finding kernel hooks.

What’s new in version 3.02

Version 3.02 includes unspecified updates.
Icon of program: RootKit Hook Analyzer

RootKit Hook Analyzer for Windows

Download now

Used RootKit Hook Analyzer for Windows?

Explore More

Full Specifications

GENERAL
Release
Latest update
Version
3.02
OPERATING SYSTEMS
Platform
Windows
Operating System
  • Windows 10
  • Windows ME
  • Windows NT
  • Windows 95
  • Windows XP
  • Windows Vista
  • Windows 2000
  • Windows 98
Additional Requirements
Windows 95/98/Me/NT/2000/XP/2003 Server/Vista
POPULARITY
Total Downloads
28,452
Downloads Last Week
1
Report Software

Program available in other languages

Last Updated

User Reviews

2.6/5

7 User Votes

Developer’s Description

By Resplendence
Check and display rootkits that hook the kernel system services of your computer.

RootKit Hook Analyzer is a security utility which will check if there are any rootkits installed on your PC which hook the kernel system services. Kernel RootKit Hooks are installed modules that intercept the principal system services that all programs and the operating system rely on. Kernel hooks are out of fashion these days and not officially documented and considered deprecated by Microsoft. The pioneering heroes of the old days who discovered how to actually implement them have all adopted the new fashion of advising against using kernel hooks as a programming practice.

Often kernel hooks are unnecessary because there are documented ways that allow a programmer to achieve his goal. However in a lot of system tools such as monitoring and antivirus software, kernel hooks are the only available technique to get the difficult job done and thus an unavoidable necessary evil. Important is that if your kernel system services are hooked that you can find out which is the responsible software that makes use of these techniques. Inspired by all the discussions going on about the Sony CD protection rootkit, we have developed the RootKit Hook Analyzer. Version 3.02 includes unspecified updates.

Download.com
Your review for RootKit Hook Analyzer