A forum for reverse engineering, OS internals and malware analysis 

Forum for announcements and questions about tools and software.
 #15722  by m5home
 Sun Sep 23, 2012 9:44 pm
a_d_13 wrote:
m5home wrote:
EP_X0FF wrote:Shutdown of PG as requirement -> compromising OS security -> seriously minimizes usefulness of this tool.
Could you edit my thread, delete this line:
If you want to use this tool, you need to disable PatchGuard, because I use kernel hook to realize some functions.
And change the title:
ARK for WINDOWS x64 - WIN64AST
Done.

Thanks,
--AD
Thank you very much.
 #15723  by m5home
 Sun Sep 23, 2012 9:47 pm
frank_boldewin wrote:it would be helpful, if the readme file in the attachment would be written in english, so everyone here can follow. ;)
OK. I upload a new attachment.
Documents in this attachment is written in CHINESE and ENGLISH.
Attachments
(971.53 KiB) Downloaded 67 times
 #16416  by m5home
 Sun Nov 04, 2012 8:16 am
New version released. New functions:
1.Enumerate and delete callback & notify.
2.Process Behavior monitor.
Attachments
(1.84 MiB) Downloaded 60 times
Last edited by m5home on Sun Nov 04, 2012 12:31 pm, edited 1 time in total.
 #16449  by m5home
 Mon Nov 05, 2012 7:37 am
New version: 1.00 BETA3.
BINs in the attachment have real digital signature.
So, you don't need ENABLE TEST SIGNING MODE, you don't need SIGN THE DRIVER FILES, you don't need RESTART YOUR COMPUTER. :lol:
Attachments
(1.15 MiB) Downloaded 84 times
 #16534  by m5home
 Sat Nov 10, 2012 5:53 am
WIN64AST 1.00 BETA4(with REAL DIGITAL SIGNATURE)
What's new:
1.Support WIN8 x64(build 9200)
2.Fix some bugs on last version
Attachments
(1.38 MiB) Downloaded 102 times
 #16604  by m5home
 Wed Nov 14, 2012 6:13 am
Elite wrote:Last tab in GUI is called "Sundries". Perhaps you meant Settings? A File/Registry explorer might be a nice feature to consider adding. Tested on Windows 8 Pro x64. No BSODs yet.
Thank you very much. :)
 #16627  by xanax
 Thu Nov 15, 2012 10:34 am
get always BSOD on Win 7 SP1 when use Hide Process, same with 32-bit or 64-bit process, it may happen right away or maybe in half an hour, same experience i have with fyyre hidecon
and there is no unhide option
nice to see behavior monitor features
+1 for file and registry features in the feature versions
  • 1
  • 2
  • 3
  • 4
  • 5
  • 10