A ROOTKIT source, using the SSDT HOOK HOOK INLINE, can escape most of the tools to detect

Rootkit-V0.1\CCRootkit\BIN\RootkitLoader.exe
............\.........\buildchk_wxp_x86.log
............\.........\CCROOTKIT-README.txt
............\.........\i386\Rootkit.pdb
............\.........\....\Rootkit.sys
............\.........\Rootkit.bbs
............\.........\Rootkit.dsw
............\.........\Rootkit.ncb
............\.........\Rootkit.opt
............\.........\.......Dll\RootkitDll.cpp
............\.........\..........\RootkitDll.dsp
............\.........\..........\RootkitDll.plg
............\.........\.......Loader\FindProcess.cpp
............\.........\.............\FindProcess.h
............\.........\.............\FindWindow.cpp
............\.........\.............\FindWindow.h
............\.........\.............\LoadDriver.cpp
............\.........\.............\LoadDriver.h
............\.........\.............\ReleaseFile.cpp
............\.........\.............\ReleaseFile.h
............\.........\.............\RemoteInject.cpp
............\.........\.............\RemoteInject.h
............\.........\.............\ReSSDT.cpp
............\.........\.............\ReSSDT.h
............\.........\.............\Rootkit.dll
............\.........\.............\Rootkit.rc
............\.........\.............\Rootkit.sys
............\.........\.............\RootkitLoader.cpp
............\.........\.............\RootkitLoader.dsp
............\.........\.............\RootkitLoader.dsw
............\.........\.............\RootkitLoader.ncb
............\.........\.............\RootkitLoader.opt
............\.........\.............\RootkitLoader.plg
............\.........\.......Sys\buildchk_wxp_x86.log
............\.........\..........\buildfre_wxp_x86.log
............\.........\..........\CCRootkit.c
............\.........\..........\CCRootkit.h
............\.........\..........\HideDriver.c
............\.........\..........\HideDriver.h
............\.........\..........\HideRegKey.c
............\.........\..........\HideRegKey.h
............\.........\..........\HookShadowSSDT.c
............\.........\..........\HookShadowSSDT.h
............\.........\..........\HookSSDT.c
............\.........\..........\HookSSDT.h
............\.........\..........\HookSysCall.h
............\.........\..........\IrpFile.c
............\.........\..........\IrpFile.h
............\.........\..........\KillProcess.c
............\.........\..........\KillProcess.h
............\.........\..........\MAKEFILE
............\.........\..........\NotifyRoutine.c
............\.........\..........\NotifyRoutine.h
............\.........\..........\objchk_wxp_x86\i386\ccrootkit.obj
............\.........\..........\..............\....\dkomhidedriver.obj
............\.........\..........\..............\....\hidedriver.obj
............\.........\..........\..............\....\hideregkey.obj
............\.........\..........\..............\....\hookshadowssdt.obj
............\.........\..........\..............\....\hookssdt.obj
............\.........\..........\..............\....\hooksyscall.obj
............\.........\..........\..............\....\irpfile.obj
............\.........\..........\..............\....\killprocess.obj
............\.........\..........\..............\....\loadimagenotify.obj
............\.........\..........\..............\....\notifyroutine.obj
............\.........\..........\..............\....\restoressdt.obj
............\.........\..........\..............\....\rootkit.obj
............\.........\..........\..............\....\rootkitdriver.obj
............\.........\..........\..............\....\systhread.obj
............\.........\..........\..............\....\SysThread.pdb
............\.........\..........\..............\....\SysThread.sys
............\.........\..........\..............\_objects.mac
............\.........\..........\...fre_wxp_x86\i386\hideregkey.obj
............\.........\..........\..............\....\hooksyscall.obj
............\.........\..........\..............\....\irpfile.obj
............\.........\..........\..............\....\killprocess.obj
............\.........\........

• We are an exchange download platform that only provides communication channels. The downloaded content comes from the internet. Except for download issues, please Google on your own.
• The downloaded content is provided for members to upload. If it unintentionally infringes on your copyright, please contact us.
• Please use Winrar for decompression tools
• If download fail, Try it againg or Feedback to us.
• If downloaded content did not match the introduction, Feedback to us，Confirm and will be refund.
• Before downloading, you can inquire through the uploaded person information

Nothing．