Thread: Low level WinNT debugger
View Single Post
  #3  
Old 04-21-2004, 16:31
zEr0 zEr0 is offline
Friend
  
Join Date: Mar 2002
Posts: 27
Rept. Given: 1
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 2
Thanks Rcvd at 0 Times in 0 Posts
zEr0 Reputation: 1
so then if SICE core is kernel driver i think that it can run under ring0 privileges

by u can find some useful thing about Ring mode in very useful virus ezines from 29A labs

http://29a.host.sk/
Reply With Quote