Rootkit author Killed !

Dragon

Hi,

Like i said, i didn't know quite what to make of it at 1st, so i asked if it was true before i decided to post anything else about it. ch0pper who is known to me and hf, and has been on the RK " scene " for some time, confirmed it.

If it turns out not to be correct after all, then it's all in Very bad taste indeed, and i'll have some words to say to a few people, and " some " people won't be trusted again. We'll have to wait and see what the " news " in the promised forthcoming announcment is ?

Spanner

holifay

Sorry i missed your post earlier ! Yes, some people won't understand that hf and others, have actually benefitted the world of security. And many have and do learn by experimenting in attack mode, including the vendors !

Spanner

Karlchen

Hi,

Because in the UK anyway, this is often how we would descibe such events, someone was killed by getting crushed in a car crash etc ! But i don't have a problem with your suggestion either.

Re the gun analogy -

I was talking about a handgun, not any big computer controlled devices etc. So someone would have to physically do as i stated, otherwise it would just do nothing forever on it's own.

As a general point about hf and the like. I expect not everyone may share my view on them, but the people that should Really be vilified, are the ones behind the Zlobs/CWS/Gromozon etc etc, and All that Spam and fake AS/AV programs etc. As far as i'm aware, hf had nothing to do with any of that ****

Anyway there's no doubt that hf is a part of RK history, and helped change the landscape, in more ways than one !

Spanner

Karlchen

Hi there,

First off Thanx 4 the Thanx, much appreciated indeed !

I knew some people would have different views on this, as i said previously. But that's fine with me, it Really is, as progress in life is often made through looking at things laterally as well as logically etc.

Communicating with, as " some " might see it, " the enemy " can  actually be more beneficial than ignoring them, hoping they'll go away, and calling them names etc. I'm not saying you have of course, but many people do seem to take that rather unconstuctive approach, which just doesn't work. In fact it makes things far worse, as it alientes them and creates a kinda war zone, which can get very nasty, and has in the past. Dialogue and understanding are the keys here to a brighter future, as would you believe, even coders have hearts too !

4 Sure " A rootkit without a payload is a POC " Still clever though, especially if coded correctly. And i certainly couldn't do it, and havn't even tried lol.

Guns can be used offensively or defensively ! Unfortunately we can't disinvent the wheel, as much as " some " may wish to, so we have to work around what we have and where we are.  Speaking of which, a vehicle can be used passively or aggressively, think 911.

Also RK's are not only used for crime etc, just remember the SONY fiasco, and similar Apps that use them for copying etc enforcement/protection.

Wooden doors are no good if there's a fire, steel etc is better ! I know what you mean though.

Our very own RootkitRevealer page - http://www.microsoft.com/technet/sysinternals/utilities/Root kitRevealer.mspx - actually links to Real live RK's and info that can be used for whatever !

Right there in the Introduction it has Direct link to rk.com -

" RootkitRevealer successfully detects all persistent rootkits published at www.rootkit.com, including AFX, Vanquish and HackerDefender (note: RootkitRevealer is not intended to detect rootkits like Fu that don't attempt to hide their files or registry keys). "

-

At the bottom of the same page are more Direct links to RK's and further info etc -

Rootkit Resources

" The following Web sites and books are sources of more information on rootkits:

www.rootkit.com

This site contains sample code for a number of user-mode and kernel-mode rootkits as well as ongoing discussions on how to develop rootkits.

http://www.phrack.org/

This site stores the archive of Phrack, a cracker-oriented magazine where developers discuss flaws in security-related products, rootkit techniques, and other malware tricks. "

-

Actually it was someone else who mentioned " a deeper understanding of computers " etc, but i acknowledge i agreed, and also included my own thoughts too.

Spanner