[CloneRanger]

Hi Libertad.

Good to see you back, and with a nice new dedicated www :)

Thanks for the update which still looks Fantastic, works extremely smoothly, and is very fast :)

When i scanned my comp it was accurate in highlighting several items as suspicious, which could have been malware but wern't, just some of my security apps ;)

On closing the app Zemana popped up with this alert

z.gif (19.05 KiB) Viewed 613 times

Is that due to my saving the log, or ?

[Libertad]

Hi CloneRanger.

What actions you perform?
I could not reproduce it. Zemana 1,9,2,210 warns only about the driver is loaded.

Libertad.

[Libertad]

I've found. This occurs when a user interacts with QLineEdit on the "Command" tab.
Apparently this is a feature of the QLineEdit (QT class) :)

[CloneRanger]

@ Libertad

Hi,

I also get the kernel alert, but that's to be expected so i obviously allow it ;)

I retried it several times and found that i only get the the clipboard alert on close if i save the log. It doesn't happen if i just generate a log. My version of Zemana is 1.9.2.210. I note what you say about user interaction with the Command tab.

Another wierd thing is this

tz.gif (7.48 KiB) Viewed 591 times

Why does it try to call out ?

By the way, the reverse DNS of where it trys to call out to is DOD

TIA

[Libertad]

Oh my God! How much do you have antivirus software and utils??? :)
One thing I can say for sure, I do not work directly with the clipboard. And do not try to steal your personal information. :)
All that concerns the clipboard, buried deep in the bowels of the QT Lib. Where? Sorry, but I do not have time to deal with it. Maybe someday I'll do that.
With regard to the Internet, it happens when Tuluka checks the digital signature of drivers.

Libertad.

[CloneRanger]

@ Libertad

How much do you have antivirus software and utils???

Just enough

And do not try to steal your personal information.

I wasn't suggesting you were, just thought you'ld like to know what i found, as others might too ;)

With regard to the Internet, it happens when Tuluka checks the digital signature of drivers.

OK, now we know :)

Regards

[liangtong]

Just find that the number of "Worker Threads" Tuluka shows doesn't match with !exqueue and RKU.
And refreshing system thread info frequently may cause deadlock on my machine.

Regards.

[unlic3nsed]

I've installed the latest version of Tuluka Kernel Inspector. (v1.0.394.77)

I've uploaded a snapshot of the suspicious system thread that Tuluka has discovered.

http://www.rapidshare.com/files/428535747/tuluka.jpg

Do you guys have any idea what is this, and could you give me advice wheather I should right-click and select Suspend System Thread?

Cheers.

[Dadeosteri]

When I try to run Tuluka, I get this: This driver has been blocked from loading.

[Alex]

unlic3nsed please create a new thread and post there results of scans from RkU, KernelDetective (system threads tab and/or the thread stack) this should allows us to figure out is this thread suspisious...