🚀 go-pugleaf

"Eric Minso" <minso@altern.org> wrote in message
news:7db38e60.0308260511.4b9a371@posting.google.com...
> "Koms Bomb" <KomsBombREMOVETHIS@hotmail.com> wrote in message
> > Usual program won't use such style because it will make the program
> > more complex to read and maintain and slower when running.
> > Such style is very popular in virus world, because they can't be
relocated
> > by the system.
> >
> > btw, Why do you hate absolute addresses? :-)
>
>
> Yes, the program I have to write really looks like a virus.
>
> I am a trainee in a IT company, and my training subject is to write an
> Windows EXE protection program. This program must encrypt the
> executable's code section and add a decryption routine inside the
> executable.
>

Why? Are they in the virus business? There's plenty of ways to protect their
intellectual property without writing a virus look-alike. Use a product that
doesn't look like a virus and that works -- try googling on "exe encryption"
for examples.

> The first approach I tried was to make a kind of winzip
> self-extractor. The main problem is that a temporary file is required
> : it is not a very secure solution :-( The other main problem is that
> it's always crashing :-((.
>
> The virus-like approach seems to be the most interesting (and easy)
> because the decryption job is done in memory and don't need a
> temporary file. There is also some common virus sources available on
> the internet, so a part of the job is already done :-)

Your company would be mad letting you write something based on a virus.

>
> The main problem is that it seems that assembly language is required
> and I still have some troubles with absolute and relative addresses.
> The other main problem is that I fear my program will be seen as a
> virus by antiviruses.
>

Even more sucking of teeth... if you use any of the widely available virus
sources, that's definitely true. If you've think you've got problems with
relative and absolute addresses, just think how it's going to be with the
police when they visit.

-- 
Regards
Alex McDonald