Hello, Evgenie Muzychenko, you wrote: I eat> you personally how , how many made such "the general linguistic data bases working EVERYWHERE"? While only that, which at me in brains. I eat> Here they and are engaged first of all in that is really claimed. There is fast money, and is "is long harnessed, yes quickly we go". The more efforts, the better result, and nothing disappears in vain. At me so, you as want. I eat> unambiguously and unconditionally. Clearly, what to master dialogue on the future it is more favourable, than these 2 . But, probably, will push easier, and then here fast money. And malloc\printf\fopen all the same do not prevent too, as . I eat> Mighty well you threatened. At once prepare to that will not be easy. Ready decisions for certain are, but to search for them it is necessary first of all at developers malware/antimalware. Well and before to be put on any algorithm, it makes sense to familiarize with policy MS in this respect - they for a long time already and systematically tighten nuts (Kernel Patch Protection, ypervisor Code Integrity, Device Guard, etc.) To forbid "it is simple to drivers" excessively deeply to climb in system. Bypass of these mechanisms will authorize only to partners (the same developers of antiviruses), by means of specially produced certificates, and it will explicitly cost decent money. By means of a source code with to unwinding made NtCreateFile under WinXP x86, a bit later under Win7 x86. Under x64 this source code too had version, but any magic method of search ssdt, and on Win8 business is not went. Therefore for x64 took other source code. It appeared more thorough and accurate. Threw out superfluous, added NTCF, then and under other functions. That is couple of days , (such temperament, well all the same new it it is time to buy) - and I made the broken display at me like is under all popular Windows (except 10. Not test silt); the code was already specific understood (though yet all); still too mastered for the first time; And that there with which this miracle demands - me excites now a little, these are problems of the customer and the budget corresponding. At me , check of signatures disconnected at the reboot, each session terminates bsod and repeatedly even to disconnect check it is not necessary. The real problem not to deliver , namely to disassemble that flies to them. It plainly is not present in those 2 source codes.