Hi,
I'm cleaning a friends computer and runing a rootkit analyzer.
http://www.resplendence.com/hookanalyzer
Its returned two things of interest to me
zwopenprocess
zwclosedprocess
Googling zwopenprocess led me to a web site that seems to be dedicated to writing hacking code.
Is zwopenprocess a "normal" thing
edit. Bit more searching with guard.sys suggests that may be associated with avg antispyware.
Ignore this please
I'm cleaning a friends computer and runing a rootkit analyzer.
http://www.resplendence.com/hookanalyzer
Its returned two things of interest to me
zwopenprocess
zwclosedprocess
Googling zwopenprocess led me to a web site that seems to be dedicated to writing hacking code.
Is zwopenprocess a "normal" thing
edit. Bit more searching with guard.sys suggests that may be associated with avg antispyware.
Ignore this please