MyCERT has developed a tool to detect and restore changed address of API made by rootkit. MyX1 SSDT Detector and Remover is a part of our  Malware Tracking project. Figure 1: Screenshot showing  MyX1 SSDT The application relies on two  two (2) files will be use upon execution: 1. ssdt.sys is used to list all […]