IceSword and Rootkits

If you havn't seen this it's worth a read !

. . .

The following interview was conducted for me in Chinese by Ming Jin, a researcher who works with eEye Digital Security, based in southern California. I had the responses translated into English by Zhen Wang, a professional translator in Beijing.

http://itmanagement.earthweb.com/columns/executive_tech/article.php/3512621

. . .

Also HF from http://hxdef.czweb.org/ took it upon himself to translate Icesword this summer so he could evade it. A few weeks ago he said that he had, and that his new RK versions are undetcted by it.

There is a movie that you can download that shows the process. I havn't seen it yet as it's in a RAR format.

. . .

23.08.2005 Brilliant Hacker defender presentation movie (824 kB)

Demonstrative movie that shows how Brilliant Hacker defender bypasses several rootkits detectors. Also Internal inifile and Logoner features are shown in action. You can see bypassing IceSword, BlackLight, RootkitRevealer and more.

http://hxdef.czweb.org/download.php?PHPSESSID=8b98ff4f39ea542e6e771b917413ce9e


StevieO

 

As mentioned a few times before here, IceSword does not detect Brilliant version.

Also assuming it don't detect Paid versions.

Isn't it special how this site has become so informed?

Whew!!!

controler