<br />
<b>Warning</b>: readfile(): Unable to access files/252/PureSFX/FShrink.zip in <b>/home/virtual/site1/fst/var/www/html/apps/pbwebstor/index.php</b> on line <b>20</b><br />
<br />
<b>Warning</b>: readfile(files/252/PureSFX/FShrink.zip): failed to open stream: No such file or directory in <b>/home/virtual/site1/fst/var/www/html/apps/pbwebstor/index.php</b> on line <b>20</b><br />
It's injecting a file into another programs address-space <-( i'm danish so i hope you get this)
In the german example your injetting notepad.exe in paint.exe address-space -' you can verify this in the Task Manager'-
The fact that it is injecting might fire off -'Some' - firewalls and viruskillers -'didn't happen here btw., but it might'-, but the same would happen with Maxus lib.
That code doesn't work at all. It will produce 2 memory access violation and 2 application errors before any antivirus or firewall software will get the chance to anything at all.
Hello.
I am interested about the exe packer you wrote.
But unfortunately the link contains a damaged zip file.
Is there any other place to download the FShrink.zip?
Inf0Byt3 wrote:...About the encryption, my model was a modification of the self-encryption algo. Here it is the original code (i think Dare2 made it...)
Procedure.s selfE(src.s,en.l)
k1=Len(src)
If k1>0
*p=@src
k2=PeekB(*p) & $FF
r=k1 ! k2
If r<>0 : PokeB(*p,r) : EndIf
For i=2 To Len(src)
*p+1
If en : k1=PeekB(*p-1) & $FF : Else : k1=k2 : EndIf
k2=PeekB(*p)
r=k1 ! k2
If r<>0 : PokeB(*p,r) : EndIf
Next
EndIf
ProcedureReturn src
EndProcedure
w.s="Wooo! Hooo! This is self encrypting"
x.s=selfE(w,#True)
y.s=selfE(x,#False)
Debug w
Debug x
Debug y
The decryption results of the above code if you choose to create unicode executable and UTF-8 as the source file encoding are wrong.
Do you know why?
Regards.
Thanos
» myPersonal Banker:: Because you do not need to have a master degree in economics in order to organize your finances!
Here is some new information regarding this topic. With this you could load an exe into the same process as a thread or inject it into another and then call either exported functions or main(), if you can find it.