Advanced Malware and Rootkit Detector: SanityCheck

SanityCheck is free rootkit detector, and free malware detector. This free software is an advanced rootkit and malware detection tool which scans the system for irregularities and threats which indicate rootkit and malware action.

SanityCheck makes use of special techniques and detects hidden and spoofed processes, hidden threads and drivers and a large number of hooks which are typically the work of rootkits and malware thereby affecting your windows. You can view all the reports which give a detailed explanation of any irregularities found and offer suggestions on how to solve or further investigate any situation.

Sponsored Links

Special deep inventory techniques used in Sanity Check – Proper reports of drivers, devices, processes, threads and a lot of other information about your system can be created by Sanity Check by using a special Windows feature (a GlobalFlag setting).

Note: SanityCheck just detects malware and rootkits, and give you suggestions to remove them. However, if you want some software that takes care of both detection as well as removal, you can try Malwarebytes AntiMalware, and Ad-Aware.

Detection of hidden processes – SanityCheck continuously checks all the processes which are hidden  from the Windows taskmanager and programming interfaces.

Detection of obscure processes – Sanity Check detects processes which do efforts to hide their names and this activity is associated with malware. It keeps a track on these types of processes.

Signature verification and checksums of processes and kernel modules – Verification of digital signature on kernel modules and processes, validity check is done.

SSDT hooks Detection – Reports are generated of kernel module responsible to hook the system service descriptor table.

Detection of Import Address Table hooks – The program detects modules of kernel which hook the entry points of exported kernel routines.

Detection of kernel object callout hooks – kernel object callout hooks which are very efficient and have the potential to instrument the complete working of the Windows kernel.

Detection of hidden drivers – Hidden kernel modules can be found by SanityCheck.

Detection of hijacked driver entry points – Sanity Check is responsible for detection of hijacked dispatch entry points in drivers can be used by malware and rootkits for a wide variety of purposes.

I am sure above text might have been confusing for most of the normal users of Windows. So, just to summarize in a nutshell, SanityCheck tries to go under the hood of Windows to look for malware and rootkits. For more simpler option, you can try SuperAntiSpyware, or Comodo Cloud Scanner.

Link to This Page: