A forum for reverse engineering, OS internals and malware analysis 

Search found 155 matches

 Go to advanced search

Re: Server Move Discussion

 by a_d_13 ¦  Thu Aug 01, 2013 4:38 pm ¦  Forum: General Discussion ¦  Topic: Server Move Discussion ¦  Replies: 11 ¦  Views: 19234

Aleksandra wrote:problem with attachments
Sorry, the board attachment quota has been reached.
Fixed, thanks for the report.


Re: Server Move

 by a_d_13 ¦  Tue Jun 11, 2013 4:07 pm ¦  Forum: Announcements ¦  Topic: Server Move ¦  Replies: 1 ¦  Views: 27905


The server move is now complete. DNS should propagate over the next 24 hours - please PM me or send me an email (rootrepeal [at] gmail [dot] com) if you have any problems.


Registration Problems

 by a_d_13 ¦  Tue Jun 04, 2013 1:07 pm ¦  Forum: Announcements ¦  Topic: Registration Problems ¦  Replies: 0 ¦  Views: 14387

Hello, I have heard from many people that there have been issues registering at the forum. If you have a problem - e.g. if your activation email never arrives - please email me at rootrepeal [at] gmail [dot] com, using the email address you registered with. I will manually activate your account. Tha...

Server Move

 by a_d_13 ¦  Tue Jun 04, 2013 1:06 pm ¦  Forum: Announcements ¦  Topic: Server Move ¦  Replies: 1 ¦  Views: 27905

Hello, The host I use will be moving physical servers on Friday, June 7th, 2013. This will result in an IP address change of the forum, and there may be up to 24 hours of downtime as the new DNS records propagate. Hopefully this move will reduce other unexpected downtime that the site has been encou...


 by a_d_13 ¦  Tue Apr 09, 2013 3:05 am ¦  Forum: Announcements ¦  Topic: Downtime ¦  Replies: 0 ¦  Views: 11421


I apologize for the recent downtime today - a security update on the server unexpectedly broke things. No data has been lost.



 by a_d_13 ¦  Sat Mar 23, 2013 5:39 am ¦  Forum: Announcements ¦  Topic: Donations ¦  Replies: 0 ¦  Views: 13842

Hello, Over the past several months, several people have contacted me asking if I was taking donations for hosting the forum. Until recently, the answer was "no", but someone recently contacted me and asked if I would accept a donation in Bitcoin . I have set up a Bitcoin address for this purpose, s...

Re: Registration Disabled

 by a_d_13 ¦  Wed Jan 23, 2013 8:27 am ¦  Forum: Announcements ¦  Topic: Registration Disabled ¦  Replies: 1 ¦  Views: 16696


Board registration will be re-enabled shortly. In addition, the board may experience some downtime on Wednesday, January 23, 2013, from 2200 to 0000 GMT, for maintenance. Apologies for any inconvenience this may cause.


Re: The "Red October" Campaign

 by a_d_13 ¦  Tue Jan 15, 2013 3:26 am ¦  Forum: Malware ¦  Topic: The "Red October" Campaign ¦  Replies: 8 ¦  Views: 5811


I have bolded the MD5s in the original post that were in the archive, so it is easier to determine what hashes we already have. I'll keep this post updated as more hashes are collected.


Registration Disabled

 by a_d_13 ¦  Wed Jan 02, 2013 5:58 pm ¦  Forum: Announcements ¦  Topic: Registration Disabled ¦  Replies: 1 ¦  Views: 16696


Happy New Year to all! Board registration has been temporarily disabled, due to a massive increase in the amount of spam. Sorry for any inconvenience, and please feel free to contact me at rootrepeal {at} gmail {dot} com, if you have any issues.


Re: Worker routine entry point

 by a_d_13 ¦  Sun Dec 02, 2012 11:02 pm ¦  Forum: Newbie Questions ¦  Topic: Worker routine entry point ¦  Replies: 25 ¦  Views: 24935

Hello, One other note: inside ETHREAD, there is a flag "ActiveExWorker", which shows whether the thread is a worker thread. You can enumerate all threads in the System process and check this flag, if you only want to capture backtraces for worker threads. Note: I have not checked this on Windows 8. ...

  • 1
  • 2
  • 3
  • 4
  • 5
  • 16