about compile the he4hook?

hello,
i want to compile the check version of the he4hook,but failed for many
times,who can help me?
thanks
best regards


ÓëÁª»úµÄÅóÓѽøÐн»Á÷£¬ÇëʹÓà MSN Messenger: http://messenger.msn.com/cn

Again?! Did you read all these replies to your question in past days? You should understand nobody here is willing to help you with rootkit and virus development and until you explain what you’re really trying to do, it is doubtful you’d give an answer to anything.

Well, I’ll tell you what to do: ask the rootkit author. He’ll surely appreciate your knowledge and give welcome to the black hat community :wink:

Best regards,

Michal Vodicka
UPEK, Inc.
[xxxxx@upek.com, http://www.upek.com]


From: xxxxx@lists.osr.com[SMTP:xxxxx@lists.osr.com] on behalf of shark marian[SMTP:xxxxx@hotmail.com]
Reply To: Windows System Software Devs Interest List
Sent: Friday, April 22, 2005 7:38 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] about compile the he4hook?

hello,
i want to compile the check version of the he4hook,but failed for many
times,who can help me?
thanks
best regards


???ѽ??н???ʹ?? MSN Messenger: http://messenger.msn.com/cn


Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: xxxxx@upek.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

I guess proving yourself to be ignorant is your objective. I will ask the
moderators to see about deleting your account. How about it, Scott? Peter?
Several people have asked him to explain his use of viral code.

“shark marian” wrote in message
news:xxxxx@ntdev…
> hello,
> i want to compile the check version of the he4hook,but failed for many
> times,who can help me?
> thanks best regards
>
> _________________________________________________________________
> ÓëÁª»úµÄÅóÓѽøÐн»Á÷£¬ÇëʹÓà MSN Messenger: http://messenger.msn.com/cn
>

shark marian wrote:

hello,
i want to compile the check version of the he4hook,but failed for many
times,who can help me?
thanks best regards


ÓëÁª»úµÄÅóÓѽøÐн»Á÷£¬ÇëʹÓà MSN Messenger: http://messenger.msn.com/cn


Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe send a blank email to xxxxx@lists.osr.com

Marian,
HE4HOOK is an underground rootkit for which you should find *NO SUPPORT*
in this list. While we are allocating reasonable resources to find ways
to protect users from such nuisances, do you think we will help you to
find new ways to mess up systems?

I suggest you to get the books WDM Programming, Walter Oney, Windows
Internals 4th Ed, Solomon&Russ. Those will help you to improve yourself.
I hope the next time, we will see better requests from you.

Good luck,
Egemen Tas

You really aren’t going to find much help on this list in terms of compiling
random root kits. As someone else noted, ask the root kit author what the
problem is.

In addition, you continue to not show proper etiquette on this list. Despite
everyone’s best efforts, you continue to submit questions devoid of any
helpful information (did it fail to compile because you used GCC? Who
knows…) and refuse to answer legitimate questions from people who are
actually willing and able to help you.

I suggest that you post any further questions in your area of research to
alt.hacker.hamster.duct-tape, because I think that you have worn out your
welcome here.

OSR List Slave

“shark marian” wrote in message
news:xxxxx@ntdev…
> hello,
> i want to compile the check version of the he4hook,but failed for many
> times,who can help me?
> thanks best regards
>

David J. Craig wrote:

I guess proving yourself to be ignorant is your objective. I will ask the
moderators to see about deleting your account. How about it, Scott? Peter?
Several people have asked him to explain his use of viral code.

Heck, I found this guy annoying since his first post. I’ve just been
waiting for just one member to suggest that we delete and ban him.

Peter
OSR

If you delete this account he can create a new one. Wouldn’t it be better
for everybody to understand that they can simply ignore the questions they
don’t want to answer? That would take care both of this poster and of
unnecessary traffic on the list. But, I guess, not - it’s so much more fun
to be able to curse and ban some “bad guy” to relieve schedule stress :slight_smile:

“Peter Viscarola (OSR)” wrote in message
news:xxxxx@ntdev…
> David J. Craig wrote:
>> I guess proving yourself to be ignorant is your objective. I will ask
>> the moderators to see about deleting your account. How about it, Scott?
>> Peter? Several people have asked him to explain his use of viral code.
>>
>
> Heck, I found this guy annoying since his first post. I’ve just been
> waiting for just one member to suggest that we delete and ban him.
>
> Peter
> OSR
>

I am starting to have compassion now on the poor OP … also because that bad software
can be recompiled to run on XP within less than five minutes … And indeed , ignoring
these kind of questions may increase the level of this forum too, as this is my humble opinion :slight_smile:

C.

----- Original Message -----
From: “Ivan Bublikov”
Newsgroups: ntdev
To: “Windows System Software Devs Interest List”
Sent: Friday, April 22, 2005 8:30 PM
Subject: Re:[ntdev] about compile the he4hook?

> If you delete this account he can create a new one. Wouldn’t it be better
> for everybody to understand that they can simply ignore the questions they
> don’t want to answer? That would take care both of this poster and of
> unnecessary traffic on the list. But, I guess, not - it’s so much more fun
> to be able to curse and ban some “bad guy” to relieve schedule stress :slight_smile:
>
> “Peter Viscarola (OSR)” wrote in message
> news:xxxxx@ntdev…
> > David J. Craig wrote:
> >> I guess proving yourself to be ignorant is your objective. I will ask
> >> the moderators to see about deleting your account. How about it, Scott?
> >> Peter? Several people have asked him to explain his use of viral code.
> >>
> >
> > Heck, I found this guy annoying since his first post. I’ve just been
> > waiting for just one member to suggest that we delete and ban him.
> >
> > Peter
> > OSR
> >
>
>
> —
> Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@compaqnet.be
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>

Ivan Bublikov wrote:

If you delete this account he can create a new one. Wouldn’t it be
better for everybody to understand that they can simply ignore the
questions they don’t want to answer? That would take care both of this
poster and of unnecessary traffic on the list. But, I guess, not - it’s
so much more fun to be able to curse and ban some “bad guy” to relieve
schedule stress :slight_smile:

Precisely! You hit the nail right on the head.

Because we REALLY need something here to help relieve the schedule
stress (no joke), it was reasonably amusing the delete the “bad guy.”
Heck, I bet SNoone liked banning and unsubscribing him. And I KNOW I
enormously enjoyed deleting him.

(this sort of reminds me of that scene in Shogun, where Lord Yabu thanks
captain Blackthorne for “the pleasure of boiling [Blackthorne’s] crew
members”)

And, of course you’re right. He can rejoin as “xxxxx@hotmail.com
or whatever. And THEN we all get to igore him for a while, and then ban
and delete him again when we need another stress-reliever.

So, we get to do both in the end, and maximize our fun at the same time :slight_smile:

Peter
OSR

Scott Noone wrote:

You really aren’t going to find much help on this list in terms of compiling
random root kits. As someone else noted, ask the root kit author what the
problem is.

In addition, you continue to not show proper etiquette on this list. Despite
everyone’s best efforts, you continue to submit questions devoid of any
helpful information (did it fail to compile because you used GCC? Who
knows…) and refuse to answer legitimate questions from people who are
actually willing and able to help you.

I suggest that you post any further questions in your area of research to
alt.hacker.hamster.duct-tape, because I think that you have worn out your
welcome here.

OSR List Slave

“shark marian” wrote in message
> news:xxxxx@ntdev…
>
>>hello,
>> i want to compile the check version of the he4hook,but failed for many
>>times,who can help me?
>> thanks best regards
>>
>
>
>
>
cmon,
not every guy in rootkit community are evil :slight_smile:

It depends on why you approach to rootkits… for myself, approaching
the rootkits community meant to improve a lot my kernelmode skills. And
it worked well. If for someone just means “i’m a supadupahacker” its
their problem, and don’t worry … they usually don’t go much further
than trying to compile stuff which they don’t know the inner workings at
all…

regards,
valerio

I dont think anyone should get this back to discussion !!!. To begin with, I
still have the question(s) "WHY HE IS AFRAID TO RESPOND to those willing to
help out " ???. Also I dont know if it is the sender wants to reinitiate
again, or there are some software falult that randomly pick some one’s id
attaches it to the msg as sender and flush down the tube of this list ". AS
SOMEONE MOST RESPECTFULLY POINTED OUT it takes only couple minutes to
compile bad code. Well I dont know whether it is bad or good, but OP should
at least respond with the intention of doing it, what is there to achieve
etc., etc.

I think it is clear that if someone can justify “The doing …” quite a few
can give hints ". This was not the case, fortunately or unfortunately ?

If it is intentional, I would say “Enough screwing …” Just drop this whole
discussion … "

-pro
----- Original Message -----
From: “valerino”
Newsgroups: ntdev
To: “Windows System Software Devs Interest List”
Sent: Wednesday, April 27, 2005 6:37 PM
Subject: Re:[ntdev] about compile the he4hook?

> Scott Noone wrote:
>> You really aren’t going to find much help on this list in terms of
>> compiling
>> random root kits. As someone else noted, ask the root kit author what the
>> problem is.
>>
>> In addition, you continue to not show proper etiquette on this list.
>> Despite
>> everyone’s best efforts, you continue to submit questions devoid of any
>> helpful information (did it fail to compile because you used GCC? Who
>> knows…) and refuse to answer legitimate questions from people who are
>> actually willing and able to help you.
>>
>> I suggest that you post any further questions in your area of research to
>> alt.hacker.hamster.duct-tape, because I think that you have worn out your
>> welcome here.
>>
>> OSR List Slave
>>
>> “shark marian” wrote in message
>> news:xxxxx@ntdev…
>>
>>>hello,
>>> i want to compile the check version of the he4hook,but failed for many
>>>times,who can help me?
>>> thanks best regards
>>>
>>
>>
>>
>>
> cmon,
> not every guy in rootkit community are evil :slight_smile:
>
> It depends on why you approach to rootkits… for myself, approaching
> the rootkits community meant to improve a lot my kernelmode skills. And
> it worked well. If for someone just means “i’m a supadupahacker” its
> their problem, and don’t worry … they usually don’t go much further
> than trying to compile stuff which they don’t know the inner workings at
> all…
>
> regards,
> valerio
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@garlic.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>

It’s called “fruits of the poisonous tree” and it assumes that all fruit
from such a tree is poisonous. That concept has been around the court
system, at least in this country since it’s inception. You align yourself
with that community you are assumed to be of that community and there
anathema to the rest of us. There are far better ways to acquire experience
in the kernel.

Gary

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of valerino
Sent: Wednesday, April 27, 2005 8:37 PM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] about compile the he4hook?

Scott Noone wrote:

You really aren’t going to find much help on this list in terms of
compiling
random root kits. As someone else noted, ask the root kit author what the
problem is.

In addition, you continue to not show proper etiquette on this list.
Despite
everyone’s best efforts, you continue to submit questions devoid of any
helpful information (did it fail to compile because you used GCC? Who
knows…) and refuse to answer legitimate questions from people who are
actually willing and able to help you.

I suggest that you post any further questions in your area of research to
alt.hacker.hamster.duct-tape, because I think that you have worn out your
welcome here.

OSR List Slave

“shark marian” wrote in message
> news:xxxxx@ntdev…
>
>>hello,
>> i want to compile the check version of the he4hook,but failed for many
>>times,who can help me?
>> thanks best regards
>>
>
>
>
>
cmon,
not every guy in rootkit community are evil :slight_smile:

It depends on why you approach to rootkits… for myself, approaching
the rootkits community meant to improve a lot my kernelmode skills. And
it worked well. If for someone just means “i’m a supadupahacker” its
their problem, and don’t worry … they usually don’t go much further
than trying to compile stuff which they don’t know the inner workings at
all…

regards,
valerio


Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: glittle@mn.rr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

NOD32 1.1080 (20050428) Information

This message was checked by NOD32 antivirus system.
http://www.nod32.com

NOD32 1.1080 (20050428) Information

This message was checked by NOD32 antivirus system.
http://www.nod32.com