Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Unsolved! The Kernel Code Injection in Vista?

Started by xQ7LSH4Fg , Apr 13 2008 06:49 AM

This topic is locked

#1
xQ7LSH4Fg

Posted 13 April 2008 - 06:49 AM

New Member

Member
6 posts

I wonder if any of the gurus/admins can shed of their knowledge on GMER log, especially the "_PAGELK". (using Vista 32-bit). Thanx in advance.

---- Kernel code sections - GMER 1.0.14 ----

.text ntkrnlpa.exe!ZwQueryLicenseValue + D41 | 8186ABB9 1 Byte [ 06 ]
.text ntkrnlpa.exe!KeSetTimerEx + 350 | 818CB9A4 8 Bytes [ 08, 80, 3A, 87, 08, 01, 91, ... ]
.text ntkrnlpa.exe!KeSetTimerEx + 364 | 818CB9B8 4 Bytes [ C0, 0A, 91, 86 ]
.text ntkrnlpa.exe!KeSetTimerEx + 3F4 | 818CBA48 4 Bytes [ 68, 41, 90, 86 ]
.text ntkrnlpa.exe!KeSetTimerEx + 428 | 818CBA7C 4 Bytes [ B8, 8D, 3A, 87 ]
.text ntkrnlpa.exe!KeSetTimerEx + 454 | 818CBAA8 4 Bytes [ 58, D1, 3A, 87 ]
.text ... C:\Windows\system32\ntkrnlpa.exe entry point in "_PAGELK" section [0x818FF4B0]