full-disclosure - RE: Full-Disclosure Digest, Vol 8, Issue 48

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon Oct 31 12:34:30 2005
From: m at rtij.nl (Martijn Lievaart)
Subject: RE: Full-Disclosure Digest, Vol 8, Issue 48

>
>> The virus scanner determined the type of the file by
>> the header and it failed. That's bad news. I am
>> wondering however, when I execute that file, how does
>> the OS process the file? I guess my question is, if I
>> have a modified version of a virus, with whatever
>> header, if I try to execute that file, will the virus
>> code get executed?
>
> Lets see, do you think this would be executed?
> -------------------------------------------------------
> MZ%Nihilist%
> %Nihilist%@...o off
> %Nihilist%set num=0

(snip)

Hihi, clamav cought that... :-]

M4