SysProt AntiRootkit

SysProt AntiRootkit is a compact and portable application that detects and eliminates rookits from your system. It caters to all types of users.

Since installation is not a requirement, you can drop the executable file somewhere on the hard disk and click it to run.

It is also possible to save SysProt AntiRootkit to a USB flash drive or similar storage unit, in order to run it on any machine effortlessly, as long as you have administrative rights.

What's more, the Windows registry does not get new entries, and leftover files are not kept on the hard disk after removing the tool.

The interface is made from a standard window with a plain layout divided into multiple panels. You can monitor active processes and view their IDs, hidden and window visibility status, as well as verify kernel modules and view their service names, module base and end, and hidden status.

SysProt AntiRootkit is able to keep an eye out for kernel and IRP hooks, scan ports and the file system, as well as create log files (for hidden objects only, or everything).

The application is minimally invasive, has a fair response time and runs on a low amount of CPU and RAM. We have not encountered any problems in our evaluation, since SysProt AntiRootkit did not hang, crash or show error messages. Unfortunately, it has not been updated for a long time and it is not supported by newer OS platforms.

SysProt AntiRootkit is part of these download collections: Detect Rootkit