rku更新了

Rootkit Unhooker v3.7 LE (internally numbered as 3.7.300.500)
MD5 e030878a8537870072531b1a49411321 *RkU3.7.300.500.exe
(file MD5 given for file in zip archive)

http://www.rku.nm.ru
http://www.rkunhooker1.narod.ru

This is the last public version of this program. We are finally going to private RK/ARK development.

Both sites will be online and we will update v3.7 in future to fix all possible and reported bugs if they will be.

RkUnhooker v3.7 changes:

version 3.7 LE build 300/500 (01.07.2007)

added: all program components Windows Vista 32 bit build 6000 support
added: all program components Windows Server 2003 SP2 support
added: new method for hidden processes detection
added: Shadow SSDT listing and unhooking
added: ability to list process DLL's and dump selected DLL
added: new about box
updated: NTFS reader has been fully rewritten
updated: SSDT hooks detection has been improved (bypassing new rootkit stealth technologies)
updated: xdf to v1.7
update system is now fully configurable
removed: GMER ban, kernel mode debuggers ban
several fixes and improvements

p.s.
Just looked on gmer v1.0.13. Well, what a crappy sh*t  unreal.b fully undetected, just a fyi Gmerek :)



I posted this http://forum.sysinternals.com/forum_posts.asp?TID=962&PID=50684#50684 here.

Currently RkU v3.7 have some issues with VMWare emulator :) We will try to fix them and upload fixed 3.7 version.

It is the last public version, because we simple do not want anymore get sh*t in our address in the case of our positions about sh*t-like programs like GMER, UnHackMe and several others security-related problems / stuffs.

Private version will be for a small circle of high-skilled people including several RAT coders.

This public version is fully workable, contains several new features and support of new OS's and even more - no more GMER ban :)

All differences between LE and VX listed in this PDF file, created by $h3ll(0d3

http://forum.sysinternals.com/uploads/20070701_074832_VX_LE.rar

最后还是不忘骂一下GMER……

楼上的还继续汉化吗

引用第2楼kid850328于2007-07-05 12:34发表的  :
楼上的还继续汉化吗

晕，你咋知道是我……
有空会继续的。

引用第3楼123456789012于2007-07-05 18:59发表的  :

晕，你咋知道是我……
有空会继续的。

最后一个公开版本了，哎~

看来老外也知道只要公开就没有活路，这条很简单的道理了。

当然事经常看驱网 所以才做的这个决定
要注意自己的影响。。。。

引用第6楼kid850328于2007-07-06 11:56发表的  :
当然事经常看驱网 所以才做的这个决定
要注意自己的影响。。。。

这话啥意思？

老外常看我们网站  受了熏陶

呵呵，楼上的，有点精典的味道喽。