Comments on: Malware able to infect only right handed people http://zairon.wordpress.com/2008/06/21/malware-able-to-infect-only-right-handed-people/ something strange happens inside it Fri, 30 Oct 2009 18:39:42 +0000 http://wordpress.com/ hourly 1 By: Charity http://zairon.wordpress.com/2008/06/21/malware-able-to-infect-only-right-handed-people/#comment-4419 Charity Tue, 16 Jun 2009 12:58:29 +0000 http://zairon.wordpress.com/?p=137#comment-4419 Solution from Orbasoft. If you own a computer, you must have antispyware to keep it running at its best. The problem is choosing a scan that works. I have tried many different types of scans in the past and then I ran across Orbasoft Antispyware. I have to say that the antispyware solution from Orbasoft is the best that I have used to date. It gets the job done and keeps my computer working like new. If you are interested in seeing for yourself just how good this antispyware works you can click on http://www.orbasoft.com to learn more. I’m sure it would be worth your time to check it out. Solution from Orbasoft.
If you own a computer, you must have antispyware to keep it running at its best. The problem is choosing a scan that works. I have tried many different types of scans in the past and then I ran across Orbasoft Antispyware. I have to say that the antispyware solution from Orbasoft is the best that I have used to date. It gets the job done and keeps my computer working like new. If you are interested in seeing for yourself just how good this antispyware works you can click on http://www.orbasoft.com to learn more. I’m sure it would be worth your time to check it out.

]]> By: zairon http://zairon.wordpress.com/2008/06/21/malware-able-to-infect-only-right-handed-people/#comment-4356 zairon Tue, 24 Jun 2008 18:42:21 +0000 http://zairon.wordpress.com/?p=137#comment-4356 Yes *asaperlo*, you are right about RC4 implementation. The code is bugged if and only if the author wanted to implement RC4 algorithm otherwise we'll have to study a new crypto algo :p Joking apart, it seems to be RC4, atleast looking at the initialization part of the crypto algo; I think it's a oversight but it's pretty strange. There are some more funny things inside the malware (strange code implementation, virtual machine check), more in the next days... stay tuned. Yes *asaperlo*, you are right about RC4 implementation. The code is bugged if and only if the author wanted to implement RC4 algorithm otherwise we’ll have to study a new crypto algo :p
Joking apart, it seems to be RC4, atleast looking at the initialization part of the crypto algo; I think it’s a oversight but it’s pretty strange. There are some more funny things inside the malware (strange code implementation, virtual machine check), more in the next days… stay tuned.

]]> By: asaperlo http://zairon.wordpress.com/2008/06/21/malware-able-to-infect-only-right-handed-people/#comment-4355 asaperlo Tue, 24 Jun 2008 14:55:43 +0000 http://zairon.wordpress.com/?p=137#comment-4355 yes i found the same code :) I also found a strange/bugged implementation of RC4 used to encrypt/decrypt the strings: In the loop for generating the stream the author seem to have done something like this: for(int i=0; i < len; i++) { i = i % 256; .. instead of i = (i + 1) % 256; dont know yet if its a feature or a bug ;) what do you think ? yes i found the same code :)
I also found a strange/bugged implementation
of RC4 used to encrypt/decrypt the strings:
In the loop for generating the stream the author seem to have done something like this:

for(int i=0; i < len; i++) {
i = i % 256;
..

instead of
i = (i + 1) % 256;

dont know yet if its a feature or a bug ;)
what do you think ?

]]> By: bw http://zairon.wordpress.com/2008/06/21/malware-able-to-infect-only-right-handed-people/#comment-4354 bw Tue, 24 Jun 2008 07:51:30 +0000 http://zairon.wordpress.com/?p=137#comment-4354 I'm left handed and im using my right hand for mouse navi, to be honest I've never seen anyone using his mouse with the left hand... I’m left handed and im using my right hand for mouse navi, to be honest I’ve never seen anyone using his mouse with the left hand…

]]> By: zairon http://zairon.wordpress.com/2008/06/21/malware-able-to-infect-only-right-handed-people/#comment-4353 zairon Mon, 23 Jun 2008 22:34:51 +0000 http://zairon.wordpress.com/?p=137#comment-4353 Yes, I'm pretty sure but I should check. May I ask you why? Did you find the same code? Yes, I’m pretty sure but I should check.
May I ask you why? Did you find the same code?

]]> By: asaperlo http://zairon.wordpress.com/2008/06/21/malware-able-to-infect-only-right-handed-people/#comment-4352 asaperlo Mon, 23 Jun 2008 21:32:07 +0000 http://zairon.wordpress.com/?p=137#comment-4352 did you find that piece of code in one of the latest worms that spreads via MSN ? did you find that piece of code in one
of the latest worms that spreads via MSN ?

]]>