I’ve been a big fan of Sysinternals’ freeware offerings for some time. They recently released a rootkit detector that they describe as: “RootkitRevealer is an advanced root kit detection utility. It runs on Windows NT4 and higher and its output lists Registry and file system API discrepancies that may indicate the presence of a user-mode or kernel-mode rootkit. RootkitRevealer successfully detects all persistent rootkits published at www.rootkit.com, including AFX, Vanquish and HackerDefender”
I definitely plan on using it to scan our master images before finalizing them – its a great tool to add to your arsenal.