Windows-Rootkits

mirror of https://github.com/ciyze0101/Windows-Rootkits

History

LycorisGuard 5bde6989bd update update		2018-08-15 14:46:23 +08:00
..
CheckKernelHook	delete no use file	2018-08-15 10:10:04 +08:00
CheckKernelHookDrv	update	2018-08-15 14:46:23 +08:00
ReadMe.txt	Create ReadMe.txt	2016-08-30 09:50:12 +08:00

1.Reload the first kernel module
2.check EAT function (Zwxx) 
3.check InlineHook (not Zwxx)