Virus signatures

[The Reverant]

On Monday 10 September 2001 10:06, John Stoilis wrote:
> Exei suzhth8ei suxna edw mesa gia xrhsh antivirus se mail
> servers. Milwntas me kapoion pou asxoleite me
> programmatismo se windows, mou eipe (kai to
> epibebaiwsa molis twra) oti an anoikseis ena .doc arxeio
> molusmeno me io, me kapoion aplo text editor, 8a breis
> mesa kapou na leei "kernel32.dll" pou einai kai h
> biblio8hkh pou exei functions gia na grafeis/diabazeis sto
> registry(ena kanoniko doc arxeio den 8a eprepe na
> peirazei to registry, akoma kai auta pou xrhsimopoioun
> VBScript mesa). 

"Mitso kalispera. Sou stelno afto to mail gia na sou eksigiso giati kathe 
fora pou pas na anoikseis ton explorer sou bgazei error gia to arxeio 
"kernel32.dll". Sta leo ola analitika sto doc pou exo kanei attach."

> O sircam omws, DEN xrhsimopoiei to mapi32.dll alla
> anti8etws sundeete apeu8eias se mail servers. Etsi, mesa
> sto molusmeno .doc arxeio 8a doume oloka8ara to
> "HELO" command, mazi me ta fake headers pou bazei.
> Sigoura ena grep tou .doc arxeiou den einai tromera
> aksiopisth me8odos, alla mporw na pw oti einai kati san
> "poor man's antivirus", mia pou ta virus definitions einai
> ola commercial.

Poli grigora kai proxeira:

#include <iostream>

void main()
{
char string[]={73,70,77,80,0};
int i=0;

cout << string << endl;
	while(string[i]!=0)
	{
	string[i]=string[i] - 1;
	cout << string[i];	
	i++;
	}
cout << endl;
}

Fisika den grafei pouthena HELO to source kai to binary, kai fisika einai 
panefkolo na kaneis kati paromoio me VB...

-- 
The Reverant
(Dimitris Stasinopoulos)

"Eimaste Mafiozoi.
Mas xtipate, sas xtipame.
Einai i douleia mas."