'Gmer', and 'Driveimage Xml'
GMER is an application that detects and removes rootkits. It scans for hidden processes, hidden threads, hidden modules, hidden services, hidden files, hidden Alternate Data Streams, hidden registry keys, hidden anything! GMER runs on Windows NT/2000/XP/Vista.
DriveImage XML is an easy to use and reliable program for imaging and backing up partitions and logical drives. The program allows you to backup logical drives and partitions to image files. Browse these images, view and extract files. Restore these images to the same or a different drive. Copy directly from drive to drive. Schedule automatic backups with your Task Scheduler.