DarkSpy is a new rootkit detection tool from China. It's coded
by two guys : CardMagic & wowocock,and supports some new features
that can make the detection more effective.
DarkSpy is consisted of five parts:
Detect hidden process(even hide with FUTo...)
Force kill process(even Icesword)
Detect hidden kernel module(even hide with FUTo...)
Detect hidden files
Force copy file
Force delete file
4.Registry function is not provided in test version.
Detect hidden ports
(Notice: DarkSpy don't allow any kernel debugger to run!)
DarkSpy 1.0.5 new features:
Enhanced Process/Driver Module detection.
Fixed some problems working with other security software(Karspersky...etc).
Enhanced process force terminate functionality.
Start to support multi-cpu and hyperthread.
Registry functionality added.
Help document added.
This is a Test Version - Use at your own Risk. Download