LnS: https://www.wilderssecurity.com/threads/why-did-you-buy-look... (perfect stealth) + the ability to block at the level of every dll run by svhost till windows 7 - then the author disappear and no solution like that anymore (it used TDI removed after windows 8).