Rootkit Hook Analyzer, shown in Figure A-10, is a cross between a one-button scanner and a multi-page/ multi-function scanner. The two pages are Hooks and Modules. The Hooks tab is similar to the SSDT tab in Rootkit Unhooker, but Rootkit Hook Analyzer rarely finds the name of the module that planted the hook. The Modules tab is similar to the Hidden Drivers Detector in Rootkit Unhooker, but it does not detect hidden device drivers.
Figure A-10