BreakPE

BreakPE is lightweight and powerful stealth malware removal utility being able to make unexecutable most PE files (applications, DLLs, drivers etc.) even if they are protected by simple rootkit technologies.

BreakPE takes different approach to stealth malware removal.

BreakPE will make malware unexecutable by overwriting disk sectors where it is stored.

BreakPE has the following advantages: ￭ filesystem independent (supports NTFS, FAT and FAT32, also supports NTFS alternate data streams); ￭ relatively safe and generic (compared with other software writing directly to disk); ￭ in most cases (when not warned otherwise) broken PE files can be unbroken afterwards.

Warning for Windows NT 4 and 2000 users: broken drivers can make these systems unbootable.