常用的Anti-Rootkits工具

Follows is a list of antirootkits. I have mirrored some of the hard-to-download ones at this site. If the author of a tool would not like me to mirror their tool, please email or PM me and I will remove the link.

Also, if you know of any more antirootkits, please post or PM me, and I will add them to the list.

 

    * ATool - http://www.antiy.net/download/atool.rar

    * ATool (mirror) - http://www.kernelmode.info/ARKs/atool.rar

    * Avast! Antirootkit - http://files.avast.com/files/beta/aswar.exe

    * Antivir Antirootkit - http://dl.antivir.de/down/windows/antivir_rootkit.zip

    * Catchme - http://www2.gmer.net/catchme.exe

    * CodeWalker ARK - http://cmcinfosec.com/download/cmcark_cw0.2.4.500.rar

    * CodeWalker ARK (mirror) - http://www.kernelmode.info/ARKs/cmcark_cw0.2.4.500.rar

    * CsrWalker - http://www.rootkit.com/vault/DiabloNova/cwalker.rar

    * DarkSpy 1.05 - http://www.rootkit.com/vault/cardmagic/DS105fix2beta.rar

    * DeepMonitor - http://orkblutt.free.fr/DeepMonitor.exe

    * Deep System Explorer (dead link) - http://diamondcs.com.au/downloads/dsesetup.exe

    * Deep System Explorer (mirror) - http://www.kernelmode.info/ARKs/dsesetup.exe

    * Dr. Web DwShark (mirror) - http://www.kernelmode.info/ARKs/DwShark.rar

    * Dr. Web DwShark (newer version) (mirror) - http://www.kernelmode.info/ARKs/DrwShark.7z

    * ESET SysInspector http://www.eset.eu/en/eset-sysinspector

    * F-Secure Blacklight - ftp://ftp.f-secure.com/anti-virus/tools/fsbl.exe

    * Filter Monitor - http://ntcore.com/files/FilterMon.zip

    * FindDll 2 (by Eric_71) - http://eric71.geekstogo.com/beta/FindDll2.exe

    * FLISTER - http://www.invisiblethings.org/tools/flister.zip

    * GMER - http://www2.gmer.net/gmer.zip

    * Helios - http://helios.miel-labs.com/downloads/Helios.zip

    * Helios Lite - http://helios.miel-labs.com/downloads/Helios-Lite.zip

    * HiddenFinder - http://www.wenpoint.com/download/HiddenFinder_setup.exe

    * Hook Analyzer - http://www.resplendence.com/download/hookanlz302.exe

    * HookShark (dead link) - http://home.arcor.de/neotracer/HookShark.rar

    * HookShark (mirror) - http://www.kernelmode.info/ARKs/HookShark.rar

    * IceSword 1.22 (english) - http://mail.ustc.edu.cn/~jfpan/download/IceSword122en.zip

    * IceSword 1.22 (english) (mirror) - http://www.kernelmode.info/ARKs/IceSword122en.zip

    * Kernel Detective v1.3.1 - http://www.at4re.com/files/Tools/Releases/GamingMasteR/Kernel_Detective_v1.3.1.zip

    * Kernel Detective v1.3.1 (mirror) - http://www.kernelmode.info/ARKs/Kernel_Detective_v1.3.1.zip

    * kX-Ray 1.0.0.102 - http://bugczech.fu8.com/bin/kX-Ray_v1.0.0.102_XP32_beta.zip

    * Mandiant Memoryze - http://fred.mandiant.com/MemoryzeSetup.msi

    * McAfee Rootkit Detective - http://download.nai.com/products/mcafee-avert/McafeeRootkitDetective.zip

    * modGREPER - http://invisiblethings.org/tools/modGREPER/modGREPER-0.3-bin.zip

    * NIAP Rootkit Detect Tools - http://www.rootkit.com/vault/uty/NIAPAntiRootkitTools.rar

    * Panda Antirootkit - http://research.pandasecurity.com/blogs/images/AntiRootkit.zip

    * Process Hunter - http://www.wasm.ru/baixado.php?mode=tool&id=359

    * Process Walker - http://www.rootkit.com/vault/DiabloNova/ProcessWalker.rar

    * Radix - http://www.usec.at/downloads3/radix_installer.zip

    * RegReveal - http://www.geocities.jp/kiskzo/regreveal_v10beta3.zip

    * RootkitDetector - http://www.tarasco.org/security/Rootkit_Detector_rkdetector/RootkitDetector.zip

    * Rootkit Unhooker 3.8 SR2 - http://www.kernelmode.info/ARKs/RkU3.8.388.590.rar

    * Rootkit Revealer - http://download.sysinternals.com/Files/RootkitRevealer.zip

    * RootQuest (dead link) - http://comsentry.com/files/RootQuest_v1.exe

    * RootQuest (mirror) - http://www.kernelmode.info/ARKs/RootQuest_v1.rar

    * RootRepeal - http://rootrepeal.googlepages.com/RootRepeal.rar

    * Safe'n'Sec Personal Pro + Rootkit Detector - http://www.safensoft.com/sns/snsrd_eng.exe

    * SafetyCheck 1.7 - http://yyuyao.googlepages.com/SafetyCheck1.7Beta.rar

    * SanityCheck 2.00 - http://www.resplendence.com/download/sanitySetup.exe

    * Sophos Antirootkit - http://www.sophos.com/products/free-tools/sophos-anti-rootkit/download/

    * Stealth MBR Rootkit Detector - http://www2.gmer.net/mbr/mbr.exe

    * SysProt Antirootkit - http://sites.google.com/site/sysprotantirootkit/Home/SysProt.zip?attredirects=0&d=1

    * SysReveal - http://www.sysreveal.com/download/SysReveal.zip

    * TDSS Remover - http://www.esagelab.com/files/tdss_remover_latest.rar

    * Tizer Rootkit Razor - http://www.tizersecure.com/freedownloads/Tizer%20Rootkit%20Razor%20Setup.msi

    * TrendMicro RootkitBuster - http://www.trendmicro.com/ftp/products/rootkitbuster/RootkitBuster_2.80.1077.zip

    * Tuluka Kernel Inspector - http://tuluka.justfree.com

    * Tukula Kernel Inspector (mirror) - http://www.kernelmode.info/ARKs/Tuluka_v1.0.360.51beta.zip

    * VBA32 Antirootkit - ftp://anti-virus.by/pub/Vba32arkit.zip

    * XueTr - http://xuetr.com/download/XueTr.zip

    * YasKit 1.223 - http://qzdx.kafan.cn/down1//AntiSpyWare/2009/YasKit1.223.rar

    * YasKit 1.223 (mirror) - http://www.kernelmode.info/ARKs/YasKit1.223.rar

 

 

64-bit Tools

 

    * TrueX64 (mirror) - http://www.kernelmode.info/ARKs/TrueX64.rar