Malware : Gpu based paravirtualization rootkit, all os vulne
Author: silvanetSubject: Gpu based paravirtualization rootkit, all os vulnePosted: 08 February 2014 at 6:11amOverall this Topic has been very interesting and informative on many levels.
View ArticleTroubleshooting : Need help with Ntoskrnl thread causing high CPU
Author: MagicAndre1981Subject: Need help with Ntoskrnl thread causing high CPUPosted: 08 February 2014 at 6:29amI asked Microsoft and ntoskrnl.exe!RtlScrubMemory does DRAM checks. So this is "by design".
View ArticleTroubleshooting : Need help with Ntoskrnl thread causing high CPU
Author: norfoxSubject: Need help with Ntoskrnl thread causing high CPUPosted: 08 February 2014 at 12:24pm MagicAndre1981 wrote:I asked Microsoft and ntoskrnl.exe!RtlScrubMemory does DRAM checks. So...
View ArticleDisk2vhd : disk2vhd 2.01 commanlinefor vhd instead of vhdx
Author: buranSubject: disk2vhd 2.01 commanlinefor vhd instead of vhdxPosted: 08 February 2014 at 6:11pmHiwhat is the command line Parameter to make a vhd instead of a vhdx with disk2vhd 2.xRegardsburan
View ArticleTroubleshooting : usbport.sys, HECIx64.sys consuming lots of CPU
Author: suess13Subject: usbport.sys, HECIx64.sys consuming lots of CPUPosted: 08 February 2014 at 8:57pmI had the same issue with these two drivers and ended up fixing it by updating the intel inf and...
View ArticleMalware : Finwide/TNT2
Author: anuskaSubject: Finwide/TNT2Posted: 08 February 2014 at 11:21pmHi Kiwi!I have exactly the same problem! Did you get it sorted?
View ArticleMalware : Finwide/TNT2
Author: anuskaSubject: Finwide/TNT2Posted: 08 February 2014 at 11:54pmI think I may just sorted it out when I was exploring around.Click on Control Panelthen on Network and Internetthen on Internet...
View ArticleAutoruns : cannot disable codecs
Author: mce1Subject: cannot disable codecsPosted: 09 February 2014 at 1:11amI am running autoruns.exe as admin on Win 7 pro. My workstation came preloaded by Lenovo with a Cyberlink program. I know I...
View ArticleProcess Explorer : ** Process Explorer Bugs **
Author: blausandSubject: ** Process Explorer Bugs **Posted: 09 February 2014 at 2:52amMemory Columns (Private bytes, working set,…)show unit 'K' where it's definitely 'M' (also according to process...
View ArticleTroubleshooting : Need help with Ntoskrnl thread causing high CPU
Author: MagicAndre1981Subject: Need help with Ntoskrnl thread causing high CPUPosted: 09 February 2014 at 4:54amthis is the only answer I got. Contact the MS support and ask them more details.
View ArticleTroubleshooting : usbport.sys, HECIx64.sys consuming lots of CPU
Author: MagicAndre1981Subject: usbport.sys, HECIx64.sys consuming lots of CPUPosted: 09 February 2014 at 4:56amthanks for your ideas :)
View ArticleAutoruns : Help, misused Autoruns and created problems
Author: tlclineSubject: Help, misused Autoruns and created problemsPosted: 09 February 2014 at 6:18amI recently used autoruns without knowing better and I think I deleted important startup registry...
View ArticleDisk2vhd : disk2vhd 2.01 commanlinefor vhd instead of vhdx
Author: buranSubject: disk2vhd 2.01 commanlinefor vhd instead of vhdxPosted: 09 February 2014 at 5:29pmJust foud it in the help-file.Name the Output file .vhd instead of .vhdx - seems to work.
View ArticleAutoruns : Help, misused Autoruns and created problems
Author: Dax1792Subject: Help, misused Autoruns and created problemsPosted: 09 February 2014 at 5:37pmTry System Restorehttp://windows.microsoft.com/en-GB/windows7/products/features/system-restoreIf you...
View ArticleInternals : Can the primary group of a file be changed?
Author: JohnAnsonSubject: Can the primary group of a file be changed?Posted: 10 February 2014 at 3:24amtakeown.exe can change the owner of a file.Is there a way to change the primary group of a...
View ArticleProcess Monitor : Running Procmon on Winpe
Author: VeeDubSubject: Running Procmon on WinpePosted: 10 February 2014 at 5:48amHello,I'm trying to get Procmon to work in a Winpe environment. I've seen some other posts on this topic and I have the...
View ArticleUtilities Suggestions : Thread dump command line utility
Author: ayanSubject: Thread dump command line utilityPosted: 10 February 2014 at 9:18amI am also looking for something in CLI that could give me at least the "Start address" like it shows in Process...
View ArticleMalware : Gpu based paravirtualization rootkit, all os vulne
Author: lil_king420Subject: Gpu based paravirtualization rootkit, all os vulnePosted: 10 February 2014 at 4:45pmIt's been a while since I have made any update to this thread. Recently I have found an...
View ArticleMalware : Gpu based paravirtualization rootkit, all os vulne
Author: lil_king420Subject: Gpu based paravirtualization rootkit, all os vulnePosted: 10 February 2014 at 5:29pmVideo can be found here www.hackingteam.it/index.php/remote-control-systemThis is one...
View ArticleProcess Explorer : Feature Request: Save changed priority
Author: UglyStuffSubject: Feature Request: Save changed priorityPosted: 10 February 2014 at 7:08pmHi guys, I use PE a lot on Terminal Server, and one feature I'd like is the ability to save process...
View Article