UnHackMe tries to detect the hidden rookits by watching the computer from early study of the boot process till the normal Windows mode. Most modern antirookit programs try to detect the rookits when the rookit is already active. They use the very complex methods for detecting hooked system functions. But the rookit authors creates the new tricks and the process repeats.
No comments:
Post a Comment