UnhookWindowsHookEx can work fine from that information alone. (It is unfortunate that it cannot actually unhook the hooks by SetWindowsHookEx, but providing the hHook (Hook Handle) is all I need really. Hide Toolz Rf All I can say is Wow! This is like an IceSword Upgrade. Are you sure that is the homepage for HideToolz? I ask this because it seems to only list v1.6 and I current found v2.1 somewhere. I know you could always eject the Dll using Ritchers method of CreateRemoteThread (tools just as Unlocker) will do that, but from what I have seen, that can cause problems and crash any process whos thread trys to execute code in the area where the Dll WAS just mapped, but no longer is. In any case, has anyone stumbled across any tools that list hooks installed by SetWindowsHookEx besides IceSword? (Would be nice to find a tool possibly with sorting columns.) I am also curious if there are ways to also find the hook handle (hHook) of all the installed hooks, enabling the ability to uninstall them (via UnhookWindowsHookEx). Hmm, I wonder if this topic should go into the Maleware section instead. This is v2.1 the latests I know of: What I really enjoy in this tool is its SSDT hooks on shutdown & hibernation/standby events.

Here is a DL link which I uploaded to (I cannot recall exactly where it came from, but I am pretty sure it was a russian or chinese security forum) EPX0FF might know of the forum. That will bring almost any rootkit (Including antirootkit tools which protect themselves using their driver) For an HIPS, I am currently on the search for, but one of my favorites so far is HideToolz.

Special highlights for me is the ability to Detect and Fix SSDT and IAT hooks. I have to say Radix is my favorite Anti-Rootkit tool: I have tried many different Anti-Rootkit tools (IceSword, RkUnhooker, Kernel Detective, NIAP tools, Gmer etc) and none seem to be able to compare to the power and functionality for which tool implements in its scans. I am curious on finding out what your opinions are on your favorite Anti-Rootkit tool and Host-based Prevention OR detection system, and also why it is your favorite/best found? (A screenshot would also be nice if you have some time. Here you can download hidetoolz shared files: HideToolz.zip from 210.97 KB, hidetoolz 3.3.rar from 48 KB, hidetoolz-2.2.rar from 202 KB, hidetoolz-2.2.rar from 202 KB, hidetoolz-2.2_2.rar from 202 KB.

Hidetoolz 2.2 3