Avast aswRdr.sys Kernel Pool Corruption and Local Privilege Escalation

http://evilcodecave.blogspot.com/2009/11/avast-aswrdrsys-kernel-pool-corruption.html

PHPSpyScanBot Analysis

http://evilcodecave.blogspot.com/2009/11/phpspyscanbot-analysis.html

[Crimeware] Researches Reversing about Eleonore Exploit Pack

http://evilcodecave.blogspot.com/2009/11/crimeware-researches-about-eleonore.html

A new case of MSN Identity Theft let-people-laugh

Redirection to my second blog:

http://evilcodecave.blogspot.com/2009/09/new-case-of-msn-identity-theft-let.html

W32/Skintrim Reverse Engieering of a Badly Coded Malware #2

http://evilcodecave.blogspot.com/2009/07/w32skintrim-reverse-engieering-of-badly_29.html

W32/Skintrim Reverse Engieering of a Badly Coded Malware #1

The first part of W32/Skintrim Reverse Engieering

http://evilcodecave.blogspot.com/2009/07/w32skintrim-reverse-engieering-of-badly.html

All ok

Low blog activity cause work and real life proofs, soon I’ll be free and I’ll release something new..

Pills of Reversing – F-Chunks Fast ways to reach Malware Core

Hosted by my second blog

http://evilcodecave.blogspot.com/2009/06/pills-of-reversing-f-chunks-how-to-fast.html

Detecting Packers in Network Streams with nPEiD

Hi,

The ability to detect Suspicious or Malicious Binaries on a network stream is one of the fundamental Risk Mitigation technique, only by knowing what flows in a traffic stream can allow the best efficient countermeasure.

Here nPEiD (Network PEiD) which allows you to detect binary packers into a network stream.

http://www.malforge.com/npeid/npeid.zip

Conficker C Analysis

Here a nice analysis of Conficker C

http://mtc.sri.com/Conficker/

http://mtc.sri.com/Conficker/addendumC/