DrvHunter is a small tool designed to intercept sys files unpacked by rootkits, anti-rootkits, and so on. It contains a built-in driver that simply hooks the ZwLoadDriver service within SSDT, so any attempt to load a new driver will be stopped and a copy of the sys file will be made before continue normal execution.
