Bill Sanderson Guest. There's room for some debate about this. Windows Defender did detect the. Sony software which Mark Russinovich discovered originally, and which was. essentially a rootkit. The Malicious Software Removal tool, which I hope everyone here is running. once a month as part of the monthly security patch download, specializes in. some rootkit families.