Wilders Security Forums  

Go Back   Wilders Security Forums > Security Products > other anti-malware software
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old April 7th, 2007, 04:04 AM
StevieO's Avatar
StevieO StevieO is offline
Frequent Poster
 
Join Date: Feb 2006
Posts: 1,068
Default RkUnhooker v3.31 released

Fixed: bug with Notify Routines and Code Hooks Detector, thanks to FlowerCode
Fixed: drivers identification bug

Updated: ILHA to bypass some user mode rootkits with patch-protection technology

Added: bypassing of locking of the system files by some rootkits
Added: UNC full support for Files Scan / Operations (should eliminate some old bugs)

$h3||(0d3 entering the team

RkU3.31.150.420.exe - 147kb

MD5 - 1FC261BE43D1119B4F627B18578759B3

http://rkunhooker1.narod.ru


StevieO
  #2  
Old April 7th, 2007, 09:12 AM
WilliamP WilliamP is offline
Very Frequent Poster
 
Join Date: Jun 2003
Location: Fayetteville, Ga
Posts: 2,125
Default Re: RkUnhooker v3.31 released

How do I get 420 on my system?
  #3  
Old April 7th, 2007, 09:17 AM
Get
 
Posts: n/a
Default Re: RkUnhooker v3.31 released

You mean how to download it?
  #4  
Old April 7th, 2007, 09:40 AM
WilliamP WilliamP is offline
Very Frequent Poster
 
Join Date: Jun 2003
Location: Fayetteville, Ga
Posts: 2,125
Default Re: RkUnhooker v3.31 released

I saved it to disk. The icon is on my desk top,but how do I open it? I have it now . I have 7 Zip and was able to open it with that. Thank you.

Last edited by WilliamP : April 7th, 2007 at 09:50 AM.
  #5  
Old April 7th, 2007, 09:54 AM
EP_X0FF's Avatar
EP_X0FF EP_X0FF is offline
Frequent Poster
 
Join Date: Nov 2006
Posts: 233
Default Re: RkUnhooker v3.31 released

Just fyi, it is archived with WinRAR v3.6
__________________
Ring0 - the source of inspiration
  #6  
Old April 7th, 2007, 10:26 AM
WilliamP WilliamP is offline
Very Frequent Poster
 
Join Date: Jun 2003
Location: Fayetteville, Ga
Posts: 2,125
Default Re: RkUnhooker v3.31 released

Thank you. The 7 Zip worked great.
  #7  
Old April 16th, 2007, 06:32 AM
SystemJunkie SystemJunkie is offline
Resident Conspiracy Theorist
 
Join Date: Mar 2006
Location: Germany
Posts: 1,500
Default Re: RkUnhooker v3.31 released

Hm, one thing is not so good: Code hooks detection takes more time for scanning process then in v.3.30.

Someone created sleeps or delays, new programmer, new delay, isn´t it? Not good.

Last edited by SystemJunkie : April 16th, 2007 at 06:45 AM.
  #8  
Old April 17th, 2007, 01:26 AM
EASTER.2010
 
Posts: n/a
Default Re: RkUnhooker v3.31 released

Quote:
Originally Posted by SystemJunkie
Hm, one thing is not so good: Code hooks detection takes more time for scanning process then in v.3.30.

Someone created sleeps or delays, new programmer, new delay, isn´t it? Not good.

I notice it too. Considerably slower than it used to run. I can only guess that engine wasn't part of the transfer of ownership and was replaced by a more slower one. Dunno.
  #9  
Old April 17th, 2007, 01:43 AM
coldplay's Avatar
coldplay coldplay is offline
Regular Poster
 
Join Date: Nov 2006
Posts: 191
Default Re: RkUnhooker v3.31 released

any comparison to panda antiRK and avg antiRK
  #10  
Old April 17th, 2007, 09:21 AM
SystemJunkie SystemJunkie is offline
Resident Conspiracy Theorist
 
Join Date: Mar 2006
Location: Germany
Posts: 1,500
Default Re: RkUnhooker v3.31 released

Quote:
Considerably slower than it used to run. I can only guess that engine wasn't part of the transfer of ownership and was replaced by a more slower one.

Exactly. That could be a reason.
  #11  
Old April 17th, 2007, 01:35 PM
fcukdat's Avatar
fcukdat fcukdat is offline
Malware Researcher
 
Join Date: Feb 2005
Location: England,UK
Posts: 569
Question Re: RkUnhooker v3.31 released

Quote:
Originally Posted by SystemJunkie
Exactly. That could be a reason.

I can't remember where i read it(poss now defunct RKU support forum) but Pushick had modified part of the operations to enchance some part of the tool's functionability.This might have been a trade off with reguards slower scan times but IRC the modification(improvement) had EP_X0FF seal of approval.

Still folks i think your making a fuss about nothing.
RKU is still the most advanced and effective same drive forensic ARK tool and it is still free
__________________
Ade Gill
Malwarebytes Researcher
  #12  
Old April 18th, 2007, 07:55 AM
SystemJunkie SystemJunkie is offline
Resident Conspiracy Theorist
 
Join Date: Mar 2006
Location: Germany
Posts: 1,500
Default Re: RkUnhooker v3.31 released

RkU V3.31 is unstable, it crashes. Damn, guys make it better as before.
  #13  
Old May 10th, 2007, 11:30 AM
SystemJunkie SystemJunkie is offline
Resident Conspiracy Theorist
 
Join Date: Mar 2006
Location: Germany
Posts: 1,500
Default Re: RkUnhooker v3.31 released

http://i8.tinypic.com/4kjmnol.png

This proves the questionability of the latest Rku 3.31 version.

Rku 3.30 remains stable and does not falsify in contrary to Rku 3.31.

Something is damnly wrong with Rku 3.31.

Also related to the ssdt-ntdll.dll Bug of rku 3.31.
  #14  
Old May 11th, 2007, 01:58 AM
Longboard's Avatar
Longboard Longboard is offline
Massive Poster
 
Join Date: Oct 2004
Location: Sydney, Australia
Posts: 3,097
Default Re: RkUnhooker v3.31 released

PrevX is calling an .exe which launches with Hidden Files detector scan "bad"
see here:
http://info.prevx.com/pxparall.asp?L...54980007c52f53

??
__________________
Don't confuse me with someone who actually knows what they are talking about.
Linux Registered user 469135
Please, support Medecins Sans Frontieres
  #15  
Old May 11th, 2007, 02:52 AM
EASTER.2010
 
Posts: n/a
Default Re: RkUnhooker v3.31 released

If i learned anything at all about exciting and useful detection programs, and with any programs for that matter, it's that at some point along the way, eventually updated versions will stumble and maybe even fall hard. That's why i keep "ALL" versions from beta releases on up, safely stored to return to them should that need happen to arise. This is no perfect science by any stretch and seems it requires very sensitive attention to detail, and even then a flaw can crop up. It's just the unmistakable nature from the originators of the Platform we all use. $M Windows
 

Wilders Security Forums > Security Products > other anti-malware software « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 07:29 PM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums