본문 바로가기

rootkit2

728x90
Process Hacker v2.18 & GMER 1.0.15.15640 release Process Hacker is a feature-packed tool for manipulating processes and services on your computer. Key features of Process Hacker: A simple, customizable tree view with highlighting showing you the processes running on your computer. Detailed system statistics with graphs. Advanced features not found in other programs, such as detaching from debuggers, viewing GDI handles, viewing heaps, injectin.. 2011. 7. 14.
728x90

Process Hacker is a feature-packed tool for manipulating processes and services on your computer.

Key features of Process Hacker:

  • A simple, customizable tree view with highlighting showing you the processes running on your computer.
  • Detailed system statistics with graphs.
  • Advanced features not found in other programs, such as detaching from debuggers, viewing GDI handles, viewing heaps, injecting and unloading DLLs, and more.
  • Powerful process termination that bypasses security software and rootkits.
  • View, edit and control services, including those not shown by the Services console.
  • View and close network connections.
  • Starts up almost instantly, unlike other programs.
  • Many more features...

Compared with Process Explorer, Process Hacker:

  • Implements almost all of the functionality offered by Process Explorer, plus more advanced features.
  • Has advanced string scanning capabilities, as well as regular expression filtering.
  • Allows you to see what a thread is waiting on.
  • Highlights both relocated and .NET DLLs.
  • Allows you to connect to other sessions, just like Windows Task Manager can.
  • Shows symbolic access masks (e.g. Read, Write), rather than just numbers (e.g. 0x12019f).
  • Shows names for transaction manager objects and ETW registration objects.
  • Shows detailed token information, as well as allowing privileges to be enabled and disabled.
  • Shows information for POSIX processes.

The ReactOS Foundation has very kindly signed the driver, so it works on 64-bit systems.

System Requirements

  • Microsoft Windows XP SP2 or above, 32-bit or 64-bit.

Screenshots




GMER is an application that detects and removes rootkits .

It scans for:

  • hidden processes
  • hidden threads
  • hidden modules
  • hidden services
  • hidden files
  • hidden disk sectors (MBR)
  • hidden Alternate Data Streams
  • hidden registry keys
  • drivers hooking SSDT
  • drivers hooking IDT
  • drivers hooking IRP calls
  • inline hooks
  • GMER runs on WindowsNT/W2K/XP/VISTA/7

    You can download GMER here.

    Please see my FAQ section and feel free to send me any comments here .


    728x90
    728x90