A forum for reverse engineering, OS internals and malware analysis 

RkUnhooker 3.8 SR2 public beta test

Forum for announcements and questions about tools and software.
 Topic locked

Re: RkUnhooker 3.8 SR2 public beta test

 #283  by Alex
 Wed Mar 17, 2010 6:20 pm
Does it still BSoD's on your XP box...
Yes, it does (VMware 6.5 with Windows XP SP2).
Last edited by EP_X0FF on Wed Apr 14, 2010 6:01 pm, edited 1 time in total. Reason: Removed attach

Re: RkUnhooker 3.8 SR2 public beta test

 #284  by EP_X0FF
 Wed Mar 17, 2010 6:24 pm
Is it Uniprocessor system? :)
I'm in process of creating environment to reproduce that BSoD's. Guess version of VmWare is not important.

Re: RkUnhooker 3.8 SR2 public beta test

 #285  by Alex
 Wed Mar 17, 2010 6:27 pm
Is it Uniprocessor system?
Yes, it is.

Re: RkUnhooker 3.8 SR2 public beta test

 #286  by EP_X0FF
 Wed Mar 17, 2010 7:11 pm
liangtong, can you tell me version of your Virtual Machine and it's name, I guess it is VmWare?

edit: BSoD confirmed and reproduced.
Seems to be it occurs in VMWare with turned off hardware VT support only.
Reasons: SGDT result differs in user mode and kernel mode.

Re: RkUnhooker 3.8 SR2 public beta test

 #288  by EP_X0FF
 Thu Mar 18, 2010 2:28 am
I've did some changes. It should now work properly on VmWare with Hardware VT disabled.
If not, please post minidump for further investigations.
Last edited by EP_X0FF on Mon Mar 29, 2010 4:57 pm, edited 1 time in total. Reason: deleted beta version attach

Re: RkUnhooker 3.8 SR2 public beta test

 #289  by kmd
 Thu Mar 18, 2010 4:30 am
Windows XP SP3 latest patches applied ntoskrnl version 091208-2029 Core2 Duo E6550 2Gb ram.
Microsoft Security Essentials on guard, no bsod's with this version :D

Re: RkUnhooker 3.8 SR2 public beta test

 #297  by Alex
 Thu Mar 18, 2010 9:09 am
This version of RkU works well.

Alex
 Topic locked
  • 1
  • 2
  • 3
  • 4
  • 5
  • 16
 Return to “Tools/Software”