Board index » delphi » c&c-crk.zip (1/1)

c&c-crk.zip (1/1)

begin 644 c&c-crk.zip
<uuencoded_portion_removed>
@9PT``%!#+DY&3U!+!08``````@`"`&L````M%P``````
`
end

 

Re:c&c-crk.zip (1/1)


-=[ In:crts...@bluewin.ch was heard to say... ]=-

 In> On Sat, 11 Jan 1997 09:39:28 GMT, m...@alias.{*word*104}pass.net wrote:

 In> It's a trojan horse! (and the developer seems to be a very bad pascal
 In> programmer ;-)
 In> --
 In> Christian Tschenett

How do you know? Do you have some way to decompile the EXE, as well as tell
what language it was written in?

  /-=oOo=--=oOo=--=oOo=--=oOo=--=oOo=--=oOo=--=oOo=--=oOo=--=oOo=--=oOo=-\
  $           Kim Forwood  <kim.forw...@access.cn.camriv.bc.ca>          %
  %              http://goodship.cn.camriv.bc.ca/~kforwood/              $
  $         For what purpose is life, if one cannot live freely?         %
  \-=oOo=--=oOo=--=oOo=--=oOo=--=oOo=--=oOo=--=oOo=--=oOo=--=oOo=--=oOo=-/
        WARNING: Flames and adverti{*word*224}ts sent to my email address
              may result in 20 gigabytes of garbage returned!

___ Blue Wave/QWK v2.20

Re:c&c-crk.zip (1/1)


On 13 Jan 1997 21:09:04 PST, Kim.Forw...@access.cn.camriv.bc.ca (Kim

Quote
Forwood) wrote:
> In> It's a trojan horse! (and the developer seems to be a very bad pascal
> In> programmer ;-)
>How do you know? Do you have some way to decompile the EXE, as well as tell
>what language it was written in?

Examine the EXE with a hex-editor (like ed4d.exe ;-) and you will
find:

 "comspec" ... "/c deltree c:\dos\s" ... "Runtime error" ... "Portions
 Copyright" ... "Borland"

That's enough information for me: the program must be compiled using a
borland compiler... There are no substrings like "%s", "/n" in the exe
therefore i conclude the compiler is borland-/turbopascal (not
borland/turbo-c).

(also there's a trojan-warning for c&c-crk.zip in alt.comp.virus. - i
think someone executed the trojan... result: runtime error ;-)

cu,
--
Christian Tschenett
crts...@bluewin.ch | gnagge...@geocities.com
http://www.geocities.com/SiliconValley/Pines/2004

Other Threads