Full Disclosure mailing list archives
Re: FrSIRT False Alarm
From: "Paul" <pvnick () gmail com>
Date: Sat, 20 Aug 2005 14:01:24 -0400
Not to mention this is hardly even assembly. This is like really ghetto assembly. In REAL assembly, there would be no ".if" statements. It's all cmp blah blah, jz, jnz, etc. Lot's more work. Also, there is no such thing as .invoke MessageBox. Give me a break. In real assembly, that code would be about 5 times longer.
Regards, Paul Greyhats Security http://greyhatsecurity.org----- Original Message ----- From: "Thierry Zoller" <Thierry () sniff-em com>
To: <ad () class101 org> Cc: <full-disclosure () lists grok org uk> Sent: Saturday, August 20, 2005 1:57 PM Subject: Re: [Full-disclosure] FrSIRT False Alarm
aco> btw illwill made something to block it, havent tested it myself but thisaco> might be useful to post it here: aco> http://illmob.org/files/0day/msdds.dll_deactivator.rar It sets the killbit that's all. A .reg file would have been enough but then of course doing that in asm makes it all l33t and stuff... -- Thierry Zoller mailto:Thierry () sniff-em com _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.htmlHosted and sponsored by Secunia - http://secunia.com/
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- FrSIRT False Alarm DudeVanWinkle (Aug 19)
- RE: FrSIRT False Alarm Ray P (Aug 19)
- Re: FrSIRT False Alarm naveed (Aug 24)
- <Possible follow-ups>
- RE: FrSIRT False Alarm Todd Towles (Aug 19)
- Re: FrSIRT False Alarm DudeVanWinkle (Aug 19)
- Re: FrSIRT False Alarm ad (Aug 20)
- Re: FrSIRT False Alarm Paul (Aug 20)
- Re: FrSIRT False Alarm ad (Aug 20)
- Re: FrSIRT False Alarm Thierry Zoller (Aug 20)
- Re: FrSIRT False Alarm Paul (Aug 20)
- Re: FrSIRT False Alarm Dave Korn (Aug 22)
- Re: Re: FrSIRT False Alarm Ill will (Aug 22)
- Re: FrSIRT False Alarm Ill will (Aug 24)
- RE: FrSIRT False Alarm Aviv Raff (Aug 25)
- Re: FrSIRT False Alarm ad (Aug 25)
- Re: FrSIRT False Alarm Paul (Aug 20)
- Re: FrSIRT False Alarm Jérôme ATHIAS (Aug 21)