As if viruses and hackers and spyware weren't enough to worry about, we also have to protect against rootkits. Think of a rootkit as an invisibility cloak for thieves: It allows security threats such as Trojans and spyware to operate in secret on your system. Worse yet, the spiffy antivirus and antispyware software currently installed on your computer is unlikely to detect rootkits.
Fortunately, security companies are starting to clean up the neighborhood with rootkit detection and removal software. One of the newest is a freebie called
Sophos Anti-Rootkit.
I'm not a security expert, and I'm not equipped to put the Sophos tool through extensive performance tests. But to check out the Sophos Anti-Rootkit interface, I installed the software and then infected my test PC with the
Hacker Defender 1.0.0 rootkit. (I really, really don't recommend installing rootkits on your PC without good reason; they're nasty stuff.)
For me, the trickiest thing about using Sophos Anti-Rootkit was finding it. The software installs in the root directory (c:/ on most computers) in a folder called SOPHTEMP. In that folder, you click an application file called SARGUI to launch the simple interface, which flaunts nary a bell nor whistle. As it ran its quick scan on my test PC, Sophos Anti-Rootkit popped up the names of the Hacker Defender files. After a few minutes' scanning, it prompted me to delete them. Easy enough.
One last caveat: Like many security tools, Sophos Anti-Rootkit can return the occasional false positive. When I ran it on my home PC, it flagged a harmless Registry key that belongs to my VPN program. Should any security program flag a potential problem, it's best to make sure that it is a problem so you don't unthinkingly delete something harmless--or even necessary. This is particularly true in the case of rootkits and antirootkit protection, which operates at deep levels of your OS and may affect important system files. Check security sites and forums for mentions of the item in question.
For a more thorough discussion of rootkits and rootkit detectors--including reviews of several other tools--see Andrew Brandt's
Privacy Watch: New Rootkit Detectors Help Protect You and Your PC.