A powerful anti-virus (rootkit) tools to hand to support 32-bit 2000, xp, 2003, vista, 2008, and Win7 operating system. XueTr site XueTr download Fireeye site (dynamic analysis) - https://fireeye.ijinshan.com/ Updated info [2012.10.25] released a XueTr-fire eye cooperation version, release details later in http://t.qq.com/linxer , Welcome to the Heat: A powerful manual antivirus tools being only support 32-bit 2000, xp, vista, and Win7 operating system, and so busy working this array, will buy Microsoft digital signature to develop support for 64-bit and Windows8 XueTr Please wait and see. Download (md5: D4B3E3A5B1FEE871A610422220C0506A) Of QQ micro-Bo: http://t.qq.com/linxer welcome to listen, later XueTr situation will be posted here. From the 0.44 version, XT adding donation information, thanked the donors in this. See donation list. The tools to achieve the following functions: Processes, threads, process modules, process window, process memory, timers, hotkeys View, kill process, kill the thread, uninstall module functions 2 kernel driver module view, to support the memory copy of the kernel driver module View 3.SSDT, Shadow SSDT, FSD, KBD, TCPIP, Classpnp, Atapi, Acpi, SCSI, IDT, GDT, and can detect and restore ssdt hook and inline hook 4.CreateProcess, CreateThread, LoadImage, CmpCallback, BugCheckCallback, Shutdown, Lego Notify Routine View, and support the deletion of these Notify Routine 5 Port View 2000 system does not currently support View the message hook 7 kernel module iat, eat, inline hook, patches detection and recovery Disk, volume, keyboard, network layer filter driver detection, and support for the deletion 9. Registry Editor 10. Process iat, eat, inline hook, patches detection and recovery 11 file system view, to support basic file operations 12 view (edit) IE plug-in, SPI, startup items, services, Host file, image hijacking file associations, system firewall rules, IME 13.ObjectType Hook detection and recovery Detect and remove 14.DPC timer 15.MBR Rootkit detection and repair 16 kernel objects hijacking detection 17.WorkerThread enumeration Disclaimer: This is just a free auxiliary gadget, if you use this tool, giving you direct or indirect losses, damage, and I take no responsibility. From the moment you use this gadget, you will be deemed to have accepted this disclaimer.