I got this info from a mailing list. I tried out the tool and sure enough, it does what it says.

http://www.sysinternals.com/ntw2k/fr...itreveal.shtml

“RootkitRevealer is a an advanced root kit detection utility. It runs on Windows NT 4 and higher and its output lists Registry and file system API discrepancies that may indicate the presence of a user-mode or kernel-mode rootkit. RootkitRevealer successfully detects all rootkits published at www.rootkit.com, including AFX, Vanquish and HackerDefender.”

--TH13