🚀 go-pugleaf

"Eric Minso" <minso@altern.org> wrote in message
news:7db38e60.0308270023.1d3f4cf@posting.google.com...
> "Alex McDonald" <alex_mcd@btopenworld.com> wrote in message news:
> > > Yes, the program I have to write really looks like a virus.
> > >
> > > I am a trainee in a IT company, and my training subject is to write an
> > > Windows EXE protection program. This program must encrypt the
> > > executable's code section and add a decryption routine inside the
> > > executable.
> > >
> >
> > Why? Are they in the virus business? There's plenty of ways to protect
their
> > intellectual property without writing a virus look-alike. Use a product
that
> > doesn't look like a virus and that works -- try googling on "exe
encryption"
> > for examples.
>
> No, they are not in the virus business.
> They just want to develop themselve their protection program (and own
> the source code).

What advantage does this bring them?

> I looked for examples on the internet, but most of
> them aren't free.
>
>
> > > The first approach I tried was to make a kind of winzip
> > > self-extractor. The main problem is that a temporary file is required
> > > : it is not a very secure solution :-( The other main problem is that
> > > it's always crashing :-((.
> > >
> > > The virus-like approach seems to be the most interesting (and easy)
> > > because the decryption job is done in memory and don't need a
> > > temporary file. There is also some common virus sources available on
> > > the internet, so a part of the job is already done :-)
> >
> > Your company would be mad letting you write something based on a virus.
>
> My boss said that it is a way that should be explored.
> I am just a trainee :-)

Owning a handgun is illegal in the UK; it's no defence to suggest you're
just taking it apart to make a pencil holder. Ask for another project.

>
>
> > > The main problem is that it seems that assembly language is required
> > > and I still have some troubles with absolute and relative addresses.
> > > The other main problem is that I fear my program will be seen as a
> > > virus by antiviruses.
> > >
> >
> > Even more sucking of teeth... if you use any of the widely available
virus
> > sources, that's definitely true. If you've think you've got problems
with
> > relative and absolute addresses, just think how it's going to be with
the
> > police when they visit.
>
> Why ? I do nothing illegal ! I am NOT developing a new virus.

I disagree.

> I am
> looking for a way to protect an EXE file. When I looked for examples
> on the internet, the only examples I found were virus-related.

That's because you _are_ writing a new virus.

>
> Now, if you have any other idea for protecting executables, I will be
> happy to have it.
>

I know how to; I'm not posting the answer. Take a course at the University
of Calgary; then if you're lucky only the University and your boss will get
sued when your company issues your code.
http://antivirus.about.com/library/weekly/aa052303b.htm

-- 
Regards
Alex McDonald