Re: SCAN 95b doesn't find MtE in EXE files (PC)

Thread View: comp.virus

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by a_rubin Thu, 05 Nov 1992 00:00

#3091

Author: a_rubin
Date: Thu, 05 Nov 1992 00:00

16 lines
1164 bytes

Stefano_Turci@f0.n462.z9.virnet.bad.se (Stefano Turci) writes:

>The conversion is very simple, in fact COMTOEXE adds 32 bytes long
>header at the top of the file, and the CS:IP points to the first byte
>after the header.

Does this work?  I though you needed to reset segment registers for
the converted program to run.  If not, I can understand why the
scanners don't detect it (although they should detect as a "varient"
or "dropper".)

- --
Arthur L. Rubin: a_rubin@dsg4.dse.beckman.com (work) Beckman Instruments/Brea
216-5888@mcimail.com 70707.453@compuserve.com arthur@pnet01.cts.com (personal)
My opinions are my own, and do not represent those of my employer.
My interaction with our news system is unstable; please mail anything important

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads