DarkSpy Anti-Rootkit 1.0.3 Test Version (English)
DarkSpy Anti-Rookit is a powerful tool for rootkit detection. DarkSpy is a multiway-based detection tool . It internally combines many effective detection techniques, include DarkSpy's own handlers and also methods used by other famous tools. Here is a simple introduction for test version:
DarkSpy is
consisted of five parts:
1.Process:
Detect hidden process(even hide with FUTo...)
Force kill process(even Icesword)
2.Kernel Module:
Detect hidden kernel module(even hide with FUTo...)
3.File:
Detect hidden files
Force copy file
Force delete file
4.Registry function is not provided in test version.
5.Port:
Detect hidden ports
(Notice: DarkSpy don't allow any kernel debugger to run!)
Environment supported by test version:
32bit Windows 2000(SP4 and later)
32bit Windows XP
32bit WIndows 2003
Single CPU without hyperthread
Use it at your own risk
Version 1.0.3 has fixed some problems working with Kaspersky series, but the conflicts may still exist . It's better to use DarkSpy without Kaspersky series at current.