RootkitRevealer compares results of a high level system scan to results of a low level system scan to detect differences. RootkitRevealer detects a discrepancy between the information returned during these scans and detects both kernel mode and user mode rootkits. RootkitRevealer requires administrator access to perform scanning.
