Gues12332, No it doesn't Products that perform kernel level hooking are discouraged by Microsoft (for x64) Have a read of the Microsoft Patching Policy for x64-Based Systems So either alternative Microsoft blessed methods need to be found or the Microsoft policy needs to be sidestepped in order to provide protection above and beyond what Microsoft themselves choose to provide (or what 3rd parties can do through the api mechanisms that are provided) Hope that helps a little, but I would imagine that this is at least one of the reasons why it isn't just a straighforward port of the existing code across to x64
