rootkit.com

main menu

forums
Show me new threads!

vault

you must be level 2 to upload files to your vault

downloads

you must be logged to access downloads

Rootkit Collection

short description	klister is a simple set of utilities for Windows 2000, designed to read the internal kernel data structures, in order to get reliable information about the system state (like list of all processes, including those "hidden" by rootkits, even by 'fu').
long description:	klister is a simple set of utilities for Windows 2000, designed to read the internal kernel data structures, in order to get reliable information about the system state (including list of all processes, including those "hidden" by some rootkits). klister consists of a kernel module and some exemplary userland programs which communicate with the kernel module in order to display some internal kernel data structures. The most interesting ones are thread lists which are used by kernel dispatcher (scheduler) code. When reading such internal list we can be (almost;)) sure that we're getting list of all threads in the system (including those which belong to hidden process) and it also means that we can create complete list of ALL PROCESSESS in the system.
project leader:	joanna
homepage:
changelog:
download:	link

post a message
Show all posts in this forum

view options: unpacked threads | collapsed threads | old style view

how many threads to display:

search board (text+titles):

subject	author	date	last post	nr. of posts
klister Problem after loading kmodule.sys	tlpkil	Nov/22, 20:22	Nov/22, 20:22	1
klister with KB835732	testtest	Aug/02, 08:10	Aug/02, 08:10	1
klister winxp Problem?	o_o0o0_o	Jun/14, 11:56	Oct/12, 08:17	3
Questions	jgama	Apr/20, 18:50	May/06, 17:06	4

"I can't believe it!", says Luke.
"That is why you fail", responds Yoda.