We would like to thank F-Secure for their BlackLight research. This product is not perfect, there are weak points that are easily exploitable, but this is one of very few products with efforts to eliminate these points. First versions of BlackLight were just another poor detectors. But the evolution of this tool was awesome. It was always nice to analyze newly implemented ideas in this tool. We've seen very nice tricks with OS loader implemented to fool rootkit hooking engine, we've seen encryption of driver to application communication, we've seen using Windows explorer process for scanning just to be sure that the scan is hooked, we've also seen very clever way of self-cleaning techniques and many many more. Almost with every new version of BlackLight there was a new idea implemented. Another great work is IceSword. Its English version is very handy tool not only for rootkit detection. A few similar but also number of different tricks were used to make IceSword hard to bypass for attackers. We believe that if BlackLight techniques are combined with IceSword techniques that it can lead to implementation of working and secure solution. This is why we are calling upon the developers of antirootkit solutions to publish source codes of their products and to join their knowledge and codes to create such solution.