KernelMode.info

a_d_13 wrote:

m5home wrote:

EP_X0FF wrote:Shutdown of PG as requirement -> compromising OS security -> seriously minimizes usefulness of this tool.

Could you edit my thread, delete this line:

If you want to use this tool, you need to disable PatchGuard, because I use kernel hook to realize some functions.

And change the title:

ARK for WINDOWS x64 - WIN64AST

Done.

Thanks,
--AD

Thank you very much.

frank_boldewin wrote:it would be helpful, if the readme file in the attachment would be written in english, so everyone here can follow. ;)

OK. I upload a new attachment.
Documents in this attachment is written in CHINESE and ENGLISH.

New version released. New functions:
1.Enumerate and delete callback & notify.
2.Process Behavior monitor.

New version: 1.00 BETA3.
BINs in the attachment have real digital signature.
So, you don't need ENABLE TEST SIGNING MODE, you don't need SIGN THE DRIVER FILES, you don't need RESTART YOUR COMPUTER. :lol:

WIN64AST 1.00 BETA4(with REAL DIGITAL SIGNATURE)
What's new:
1.Support WIN8 x64(build 9200)
2.Fix some bugs on last version

Last tab in GUI is called "Sundries". Perhaps you meant Settings? A File/Registry explorer might be a nice feature to consider adding. Tested on Windows 8 Pro x64. No BSODs yet.

Elite wrote:Last tab in GUI is called "Sundries". Perhaps you meant Settings? A File/Registry explorer might be a nice feature to consider adding. Tested on Windows 8 Pro x64. No BSODs yet.

Thank you very much. :)

get always BSOD on Win 7 SP1 when use Hide Process, same with 32-bit or 64-bit process, it may happen right away or maybe in half an hour, same experience i have with fyyre hidecon
and there is no unhide option
nice to see behavior monitor features
+1 for file and registry features in the feature versions

Bug Check 0x109?