Hypersight Rootkit Detector utility checks for presence of kernel rootkits on Windows-based systems.
Rootkits are a new generation of malware that are impossible to detect by performing a regular system scan. Rootkits hide their presence in the operating system by executing their code in stealthy manner and preventing their data from detection. In a more general note, rootkits can be considered very dangerous stealth viruses.
Hypersight Rootkit Detector employs virtualization technologies (Intel VT-x, AMD-V). It runs at more privileged level than most of rootkits. It intercepts suspicious oprations at the kernel mode (execution of code outside of OS kernel and drivers, modification of system registers) and makes dumps of these operations. This information is quite enough to say about presence of rootkit on the PC.
Requirements:
· Processor: Intel with VT-x support or AMD with AMD-V support