GMER

GMER is essential for users looking to detect rootkits and any software which works with rootkits. For advanced users in particular, this program functions as a free rootkit detector that finds and locates threats. It also removes rootkits as desired, with options to delete hidden files, kill stubborn files and disable malicious services. It has the capabilities of fully scanning your Windows PC or laptop and searches to find any programs or processes which are not explicitly shown. These include hidden processes, threads, modules, services, files, disk sectors (MBR), Alternate Data Streams and registry keys, as well as drivers hooking SSDT, IDT and IRP calls, and inline hooks. The results appear in a detailed log that can be copied or saved for analysis. Checkboxes in the main window limit the scan to selected areas such as sections, devices, modules, processes, services, registry or files.

GMER  is very versatile. Besides the rootkit scan, it includes a disk browser, a registry browser and editor, and a quick disk scan. It runs on Windows NT, 2000, XP, Vista, 7, 8 and 10, including 64-bit editions, and the last version, 2.2, added support for Windows 10. Because some malware blocks a file named gmer.exe, the author recommends downloading the randomly named EXE offered on the website. Command-line options such as -killfile and -nodriver help to deal with stubborn malware.

GMER is a good choice for users who want to examine a system at a low level and understand advanced topics like rootkits; its technology was also integrated into the avast! antivirus. It is free to use, which means that it competes with alternatives that may require users to pay a subscription or a one-time fee. The program is no longer updated, and interpreting its log requires some knowledge of Windows internals. The website also offers smaller tools from the same author, such as the MBR rootkit detector mbr.exe.

Finds hidden processes, services, files, registry keys and driver hooks that rootkits conceal from Windows.

Features:

• Find and detect rootkits
• Locates programs, processes and other hidden components
• Simple user interface
• Free to download
• Removes rootkit files and disables malicious services