Results 1 to 15 of 15
Thread: The Governor.
Hybrid View
-
13th February 2011 20:08 #1Registered User
Join Date: Feb:2011
Location:
Posts: 7
-
13th February 2011 22:35 #2
" " , Process Explorer Microsoft :
http://technet.microsoft.com/en-us/s...rnals/bb896653
-
14th February 2011 20:28 #3Registered User
Join Date: Feb:2011
Location:
Posts: 7
, karnel32.dll dll-. , , , . The Governor. , , . The Governor rootkit dll . - .
, The Governor.
-
14th February 2011 20:44 #4
, . imweasel . .
Crashing is NOT normal. It is accepted as normal because of Windows.
Ah the Geforce 440 MX...all the power of the Geforce 2MX, without nearly a damn being changed...
-
14th February 2011 20:49 #5Registered User
Join Date: Oct:2003
Location:
Posts: 4,317
. Process Explorer, Process Monitor . , , , - , - .
-
15th February 2011 22:09 #6
, API .
EVGA X299 FTW K|i9-7960X@4.7|4x8 Patriot Viper Steel 4000|GTX 1660 Ti|970 EVO 1 TB|Seasonic Focus GX-1000|Xigmatek Elysium|
Rampage IV Extreme BE|E5-1680v2@4.7|4x4 HyperX 1866|Cougar Aqua 240|GTX 1050 Ti|970 EVO 1/4 TB|CM 850 SilentPro|HAF-X|
-
15th February 2011 22:31 #7Registered User
Join Date: Feb:2011
Location:
Posts: 7
-
15th February 2011 22:47 #8
, Vista Seven , Address Space Layout Randomization? , DLL-, . DLL-, API- NVIDIA(nvapi.dll) , . - .
XP x64 , system service table, rootkit-. .
- . , user mode , , .
, .EVGA X299 FTW K|i9-7960X@4.7|4x8 Patriot Viper Steel 4000|GTX 1660 Ti|970 EVO 1 TB|Seasonic Focus GX-1000|Xigmatek Elysium|
Rampage IV Extreme BE|E5-1680v2@4.7|4x4 HyperX 1866|Cougar Aqua 240|GTX 1050 Ti|970 EVO 1/4 TB|CM 850 SilentPro|HAF-X|
-
16th February 2011 20:44 #9Registered User
Join Date: Feb:2011
Location:
Posts: 7
XP x32. , , ASM ( ), . IDA, load- dll, IDA , DLL- "DLL loaded ()" . Windows, , dll-, . "Log" , . , , OpenProccess , .
-
16th February 2011 20:53 #10
ReadProcessMemory
, .
IDA?
DLL, . , . , . DLL(. ), , .
, , ( , ).EVGA X299 FTW K|i9-7960X@4.7|4x8 Patriot Viper Steel 4000|GTX 1660 Ti|970 EVO 1 TB|Seasonic Focus GX-1000|Xigmatek Elysium|
Rampage IV Extreme BE|E5-1680v2@4.7|4x4 HyperX 1866|Cougar Aqua 240|GTX 1050 Ti|970 EVO 1/4 TB|CM 850 SilentPro|HAF-X|
-
16th February 2011 20:57 #11Registered User
Join Date: Oct:2003
Location:
Posts: 4,317
, IDA - http://www.hex-rays.com/idapro/ . - Windows ( , ). , , .
-
16th February 2011 21:07 #12
.
EVGA X299 FTW K|i9-7960X@4.7|4x8 Patriot Viper Steel 4000|GTX 1660 Ti|970 EVO 1 TB|Seasonic Focus GX-1000|Xigmatek Elysium|
Rampage IV Extreme BE|E5-1680v2@4.7|4x4 HyperX 1866|Cougar Aqua 240|GTX 1050 Ti|970 EVO 1/4 TB|CM 850 SilentPro|HAF-X|
-
16th February 2011 21:36 #13Registered User
Join Date: Feb:2011
Location:
Posts: 7
C/C++, , ( ), .
-
16th February 2011 21:44 #14
, .
DLL - . , , . / . , .
, , . , - , .
, , - - -, .
API , , , , , , . - , .Last edited by Bombera; 16th February 2011 at 21:56.
EVGA X299 FTW K|i9-7960X@4.7|4x8 Patriot Viper Steel 4000|GTX 1660 Ti|970 EVO 1 TB|Seasonic Focus GX-1000|Xigmatek Elysium|
Rampage IV Extreme BE|E5-1680v2@4.7|4x4 HyperX 1866|Cougar Aqua 240|GTX 1050 Ti|970 EVO 1/4 TB|CM 850 SilentPro|HAF-X|
-
16th February 2011 21:51 #15Registered User
Join Date: Feb:2011
Location:
Posts: 7
- . .
,
.




Reply With Quote
. , , The Governor rootkit, , " " . , dll- - . , "download & use", , .

R9 280,
7th May 2023, 21:28 in