A powerful system driver for deleting "unremovable" objects
The CESAM system driver is loaded at an early stage of the OS loading process and becomes active as soon as it gets access to the file system and the registry. That is why CESAM can work with system objects before any malicious code has initialized, low-level rootkits being no exception.


