I am looking for a Userland rootkit
The functionality it should include is:
Hide files containing a specified string
Hide registry keys containing a specified string
Compatible with Windows XP, Windows Vista, Windows 7
Can be done by for example SSDT hooks on NtQueryDirectoryFile, NtEnumerateKey, etc...
1. Written in C++ (Or C-Style C++, as long as it is compiled as C++ code)
2. Not visible in famous Rootkit Unhookers (RKUnhooker, GMER)
3. Small size
4. If using DLL or Driver, the strings to hide should be specified within the Binary and not the Driver/DLL
7 freelancers are bidding on average $536 for this job
i am very experienced in making apps using c/c++. since i am responsible you can trust me. i will submit the product as soon as you want within a short time. thanks....
I've done similar products long long ago,my work is anti-rku,very experienced in making driver.if using SSDT hooks,a week is enough. 32bit Win2000WinXpWin2003VistaWin7 is OK,but 64bit is not support.