ice sword update

This may already have been posted:

New version of Ice-sword: http://xfocus.net/tools/200604/

AFAIK this is bonafide and works for me.
Help file in chinese.

~removed direct download link to the .rar file....a link to the site only is preferred....Bubba~

 

Doesn't work on my system.

 

the 1.16 version works on my system(windows xp en pro sp2). But according to the author's blog, there are bugs inside, which might cause some systems unstable or icesword unusable. So he doesn't recommand users to upgrade it. Btw, the latest version is 1.18 beta2. The link is on the author's blog. However, the connection might be very slow.

 

Doesn't work here either

 

If you get error code 4 according to the author's blog, one possibility is that you are infected because some rootkits cause Icesword to display that.

You can try turning off hyperthreading (via bios setup) . it does the trick for me.

Loosely translated from the blog.

1.18beta2

Firstly, to my friends I would like to express my gratitude, even a few words from you is enough to make me happy, making me feel that protecting IS is worthwhile doing. Additionally to the friends who sent me their error dumps, I would also like to say thanks to them.

I would like to say sorry to everyone. Most of the bugs in 1.16 came from changes in the anti debugging code, altough the changes weren't very major, due to carelessness and the lack of testing on SMP machines or machines with hyperthreading, this caused the various crashes observed. I have now removed this, because I felt that that even for the sake of completness (perfectness?) these changes were not necessary, and because the funtional code changes in 1.16 were very minor anyway and were just (token?? doing for the sake of doing only?).

However, there will still be other problems because there are too many kinds of PCs out there, software use in computer systems are even more numerous, and the maintance/testing time is limited,??, so I cannot guarantee that the testing is sufficient. I ask for everyone's understanding.

None-educational accounts will be slow, but since it's only a beta, not being able to download it temporaily is not imporant. Send me a mail , I will reply
when I have the time (of course hopefully your mail won't be treated as spam by the mail system and disposed off)

 

Not able to get the download here.

Is the 1.18beta2 an english version?

 

Thanks. Disabling hyper threading did the trick.

 

1.18 released.

Loose translation follows..

********************

For the last two days, the response to 1.18 was not bad, so it will be the official release version.

Some friends have reported (some kind of problems), a pity only a few of them sent error logs, and some of them couldn't be opened, lol! I don't have time to check the code, and you need error logs/file dumps to do debugging. Because my testing shows no problem of the kind, I will temporarily shelve this problem.

I think it could be a conflict with the firewall? Additionally for systems that have had crashes with all versions (of icesword), should consider the possibility of a software conflict or an infection problem.

****************

So anyone downloaded the 1.18 yet? There's an english version

 

I have been trying all morning DA but with no success.

The blog shows a 1.18english and a 1.18beta 2

 

Works fine on this end just like the earlier versions.

ICE SWORD KICKS MAJOR BOOTY

It reveals a TON of areas to inform you of all sorts of KOOLNESS or badness if thats in there too.

 

unable to dl 1.18 from blog links.
cant find it anywhere else.

 

The reason is that the file (v 1.18 ) is inside the Chinese Educational Network, which limits outside connection to access it.

 

i've downloaded it,here's another link
~removed direct download link to the .rar file....a link to the site only is preferred....Bubba~

you can try it,
btw,it's a chinese site too

 

I'm unable to d/l the english version also.

 

Now it's 1.18 public

But Only Chinese
DL
http://www.54hk.org/Soft/ShowSoftDown.asp?UrlID=1&SoftID=11

 

I've downloaded the english version on the author's blog
if some one could tell me where to upload............

 

Try rapidshare.de

-- Tom

 

IceSword 1.16 is the latest English version (dtd 25 Apr 2006)
Download link at: http://www.antirootkit.com/software/IceSword.htm

-- Tom

 

The Blog site clearly shows a 1.18 english released and a 1.18beta 2 english

 

i've uploaded it,here:
http://rapidshare.de/files/21011497/IceSword1.18en.7z.html

 

wujxin

Thanks for uploading it. I got it and will give it s try.

controler

 

Yes wujxin, thank you very much for the upload.

Now, can anyone explain the "Boot and monitor" option? I'm pretty sure it is what the name suggests, but I am relucant to
try it out without hearing from the (fearless) experts first. Thanks in advance.

 

I guess it is to monitor any process created after reboot

 

After the reboot the driver of IceSword is set to be loaded before any userland process in the system. When it is loaded it sets the notification routine which is called when a new process or thread is created. Then when you run IceSword later again and you look into Log Process/Thread Creation you will see what happened since Windows started. This is very useful if you think there is some stealth malware loading in some early stage of system start.

 

thankyou.

Nice home page:good luck; I'll be visiting.

Anybody got an english translation of the help file yet?