🚀 go-pugleaf

> I doubt if its creating a trojan. NAV will be alarming on the
> "unwrapping" code (I don't know what that program does, maybe it
> compresses, encrypts, or something). There are probably one or more
> known Backdoors that are processed with elitewrap.
>
> Good idea to send it to Symantec. They'll want to be sure that they
> are alarming on real trojans, not just the elitewrap code.

Yes, it seems that NAV is alarming on elitewrap code.  I scanned my whole
system and there is no "Backdoor.Trojan".

Elitewrap does not compress or encrypt, it stores the files that you pack,
as it is, within the .EXE created.

It is true that elitewrap can be, and has been, used for dark things (you
can use it to pack an innocent game with a virus, and have them both execute
when the file is run, one executing visibly, and the other hidden), but it
is freeware and people could use it for nicer things too.

The people at SARC seem to be machines.  I sent elitewrap to them and they
said it was not infected.  I sent the file I had created using elitewrap,
and they said it was infected.  Nothing else.  Another thing is that I got
the reply immediately, within a few minutes, which makes me think there
can't be a human at the other end.

I thought NAV was really good, when it alarmed first on the file I had
created (the one that listened on port 12 and sent back a command prompt),
but it seems it's just alarming on the elitewrap signature.  I'm a little
disappointed :-(

I think I'll contact NAV tech support and tell them about it.

Thanks for your help.

--
Baba the Cat
"I have studied many philosophers and many cats. The wisdom of cats is
infinitely superior." - Hippolyte Taine