There's "root kit revealer", that's the best I know of at present.
I also have a text file on my desktop (you know, just right click and make a new text file. It's called $sys$canary.txt
Anytime the Sony Rootkit or it's decendants get loose on your machine, this file will vanish.
Any file starting with $sys$ will do that once the Sony stuff has been at work on your kernal - it uses the canary.txt bit on the end so it is like when miners took caged canaries down the mine with them to reveal a dangerous environmet before it harmed humans. I got this tip from another, but it's a good one!
Hope it helps someone. If you try and make that file and it goes away immediately, you got that Sony thing going on.
To double check make one called canary.txt and if that stays then try adding the $sys$ to the start of the filename, if it then vanishes on being renamed, you got it!
I also have a text file on my desktop (you know, just right click and make a new text file. It's called $sys$canary.txt
Anytime the Sony Rootkit or it's decendants get loose on your machine, this file will vanish.
Any file starting with $sys$ will do that once the Sony stuff has been at work on your kernal - it uses the canary.txt bit on the end so it is like when miners took caged canaries down the mine with them to reveal a dangerous environmet before it harmed humans. I got this tip from another, but it's a good one!
Hope it helps someone. If you try and make that file and it goes away immediately, you got that Sony thing going on.
To double check make one called canary.txt and if that stays then try adding the $sys$ to the start of the filename, if it then vanishes on being renamed, you got it!