SYSREVEAL

We made SysReveal just for fun not for money, we know SysReveal is far from extraordinary for there are many talent guys who provide other anti rootkit tools and make them free to use too. But we also believe that SysReveal has its unique features and powerful functions that make itself different. We could become better with your help.

So if you have any suggestions and questions about SysReveal, please report them here. You could also send mail to us, the mail address is epocsoft (at) gmail.com.

According to the test result of ntinternals.org, SysReveal is one of the best anti-rootkit tools which could detect hidden process and module.

(continue reading…)

SysReveal v1.0.0.10 is released, please download the latest version here.

The following are change logs:

1. +Real time memory editing, both ring 3 memory and ring 0 memory(Beta!). Note: it is dangerous to write to memory directly via SysReveal, it might cause process crash, even BSOD, please be careful when proceeding. 
2. *Fix bug: disassmble not correct. (Thanks to 71190838 from PEDIY)

SysReveal continues to fix bugs and add new features. Please download the latest version here.

Change log:

1. +Use VAD to detect hidden module
2. +Add disasm entry code to most of the view
3. +Add keyboard hook view
4. *Fix some process view bugs in Windows 7
5. *Fix driver bugs in VISTA SP1

Screen shots:

(continue reading…)

博主给自己放了两个月的大假，彻底的休息了一下，终于该花点时间好好改改SysReveal的BUG了。赶在Christmas Eve前发布v1.0.0.8，SysReveal的最新版本请在此下载。

以下是修改历史：

1. +在大部分窗口增加了数据导出的功能
2. +ListCtrl增加了搜索功能(Ctrl+F)
3. +驱动页面增加了查看完整内核内存的功能
4. +驱动页面增加了指定区域转储的功能
5. +内存查看窗口二进制视图增加了右键菜单
6. +文件页面增加了被占用文件强制复制的功能
7. +文件页面增加了简单快捷键（回车键和退格键）。
8. +注册表页面增加了查看注册表引用功能
9. +驱动增加了文件强制读取的功能
10. +增加了英语支持
11. *修正了几个可能导致驱动CRASH的问题
12. *修正了ListCtrl显示不正确的问题
13. *修正了内存查看窗口搜索结果不正确的问题
14. *修正了驱动页面刷新导致死循环的问题
15. *修正了文件页面右键查看时可能会CRASH的问题
16. *修正了状态栏显示不正确的问题
17. *修正了驱动文件厂商可能无法显示的问题

路漫漫其修远，还有好多的事情等着做……

SysReveal v1.0.0.7主要修改了广受诟病的文件管理部分，国庆节以后我重新优化了代码并增加了文件句柄查询和文件搜索功能。SysReveal的最新版本请在此下载。

(continue reading…)

SysRevealv1.0.0.4和v1.0.0.5修改几个字符串结束符不正确导致的显示错误，除此之外没有更新。而v1.0.0.6在内核部分加上了诸多功能，包括DPC TIMER枚举，线程枚举，文件系统Minifilter枚举，以及注册表回调的枚举。

(continue reading…)

这里整理了一些关于SysReveal的常见问题。关于使用方面的问题将另行发帖说明。

(continue reading…)

SysReveal是一款适合于高级电脑用户使用的反病毒和反rootkit辅助工具，SysReveal提供诸多强有力的功能来检查系统中可能存在的威胁，并配合用户的进一步操作。SysReveal的最新版本请在此下载。
(此功能简介基于v1.0.0.6，目前尚未更新！)

(continue reading…)