First Spyware coded in PB... or not ??

PB · Post by PB » Sat Nov 12, 2005 1:52 am

> someone sent me than a program which used the PB command
> 'RunProgram' will be detected as spyware

Hmm, I use Avast and never saw an alert about this. Has the person who
reported it, tried it both with and without RunProgram? Maybe their exe is
getting infected by something else?

Besides, if RunProgram is just calling ShellExecute then the virus app is
at fault, and not RunProgram.

NoahPhense · Post by **NoahPhense** » Sat Nov 12, 2005 2:42 am

Well I use Avast... but more importantly I use BlackICE ..

Not only does everyones exe, yup including EXCEL.EXE and MSWORD.EXE
need my approval to be put into the BlackICE Database on my system
in order for it to even launch.

But furthermore, even after it launchs, and attempts to do ANY form of
communication, wether it be LAN communication, or WAN (internet)
communications, it needs my "further" approval ..

- np

dagcrack · Post by **dagcrack** » Sat Nov 12, 2005 2:45 am

NoahPhense wrote:Well I use Avast... but more importantly I use BlackICE ..

Not only does everyones exe, yup including EXCEL.EXE and MSWORD.EXE
need my approval to be put into the BlackICE Database on my system
in order for it to even launch.

But furthermore, even after it launchs, and attempts to do ANY form of
communication, wether it be LAN communication, or WAN (internet)
communications, it needs my "further" approval ..

- np

Same here

DoubleDutch · Post by **DoubleDutch** » Sat Nov 12, 2005 3:59 am

I tested it, nothing wierd happened here. But the antivirus programs do seem to make mistakes all the time.

NoahPhense · Post by **NoahPhense** » Sat Nov 12, 2005 4:23 am

DoubleDutch wrote:I tested it, nothing wierd happened here. But the antivirus programs do seem to make mistakes all the time.

Hey dude.. I don't use your app, but its big and its tough from what I
understand.

As for people building blockers for your app. There are no laws in any
country that will stop them from doing that. And you can't create any
cheesy license agreement that will protect you against the big boys.

Meaning any AV company, Spyware company, or even myself. If I
decided to buy that app, then ripped into the client .. and built a tiny
blocker for and put it out on the internet for FREE. There is nothing
that anyone could do about it.

Of course I wouldn't need that, nor anything. Because as I said earlier,
no apps run without being in my DB.. literally, even if you gave me a
new exe right now, of any type, I get this message. But keep in mind,
that this is with ANY new file that can 'execute' ..

Then, even if I let this program run. And it trys to touch anything on the
network. I get this:

Anyhow Cudos to you. Hope you're making some money with it.

- np

DoubleDutch · Post by **DoubleDutch** » Sat Nov 12, 2005 5:53 am

NoahPhense:Nice looking application.

The main reason for putting up the now-infamous notice was to attempt to stop companies like Grisoft (avg) from automatically deleting the program without any prompt whatsoever. A couple of times AVG deleted programs written in PB that were not SpyMon!

They need to be sure that programs that automatically get deleted (if any) are really hostile. It seem that the method of checking is not accurate enough to be reliable to do a delete without prompt. Commercial programs should at least in any event get a prompt as to what to do with them.

In this case (counterspy) they are stating that its a commercial program and the default action is to suggest not deleting it. Because this is the case I will be supplying them with information about a special registry setting that will stop "datasneak" from running if set - just in case the user really wants rid of it. Soon this key will also force datasneak to uninstall itself if found.

Hopefully other anti-trojan software houses will take note and create a similar system. Probabily not though as they don't usually know how reply to emails until threatened.

techjunkie · Post by **techjunkie** » Sat Nov 12, 2005 11:34 pm

thefool wrote:haha what a joke. PestPatrol can suck my balls!

I hope your balls are shaved...

dagcrack · Post by **dagcrack** » Sun Nov 13, 2005 1:16 pm

techjunkie wrote:
thefool wrote:haha what a joke. PestPatrol can suck my balls!
I hope your balls are shaved...

oh god... hahahaa
Ok seriously now.. eh..
(laughs)
They should suck his balls I mean, Everyone knows: pestpatrol is nasty! (plus he would obviously enjoy it)

*walks away laugthing*

Hmm he states to do some power lifting and now It could be true about the shaved balls

I better stay away from people like thefool

- They turn out weird with all those hasselhoff pictures flying around..

thefool · Post by **thefool** » Sun Nov 13, 2005 4:23 pm

haha

oh i wouldnt like to be in your shoes now

dagcrack · Post by **dagcrack** » Sun Nov 13, 2005 4:45 pm

Damn I can see the rocket coming right to my a...
*seals with glue*

thefool · Post by **thefool** » Sun Nov 13, 2005 5:21 pm

Hoho!
You shouldnt have drinked all that coffee! I have put laxative in it!
And now you glued your a**

im happy i dont have to clean up afterwards!

dagcrack · Post by **dagcrack** » Sun Nov 13, 2005 5:34 pm

Well, coffee IS a laxative, same with many other things. Hence: drink too much and you'll feel it's _real_ power! hehe.

Go on, drink 6 cups (or 20 -evil laugh- ).
6 cups = milkshake output
20 cups = morgue output

..why I have the feeling you always push me off-topic in purpose...

thefool · Post by **thefool** » Sun Nov 13, 2005 5:46 pm

why i push you offtopic? I just wrote something about pestpatrol then you begin talking about shaved balls and hasselhoff pictures

dagcrack · Post by **dagcrack** » Sun Nov 13, 2005 5:57 pm

I didnt start with the offtopic techjunkie did!

GeoTrail · Post by **GeoTrail** » Sun Nov 13, 2005 5:59 pm

I have forgotten what this thread was all about