Posted on 2004-05-24 11:10:23 by bart
Downloaded The file from the link and inturn turned out be a virus :mad:

Mods please delete this post immediately.

Virus: Bloodhound.W32.EP

Scanned By: Norton Antivirus 2004

Please check the links before you submit those :tongue:
Posted on 2004-05-24 11:40:00 by telophase
hey genius, please show me the virus code :), antivirus software detects this as a virus becouse it looks like it, but in fact its only pe-packer, just like UPX
Posted on 2004-05-24 11:45:36 by bart
See man! i normal users like me get scared easily :grin:

No hard feelings ;)

Also i had a previous version of the app but norton didnt show me any warnings thats why it

doubted me:confused:
Posted on 2004-05-24 12:02:45 by telophase

See man! i normal users like me get scared easily :grin:

No hard feelings ;)

n/p :), i just sent info about FSG to all major antivirus support centers, so maybe it wont be detected as a virus in the future realse of those apps...
Posted on 2004-05-24 12:06:29 by bart
I dont know why i dint get the warning when installing the previous version of the application??:confused:
Posted on 2004-05-24 12:08:16 by telophase
install.exe scroller is tooo fast
very nice packer
Posted on 2004-05-24 12:09:29 by comrade
maybe it was already detected by your antivirus as a packer, and this is a new version with different code
Posted on 2004-05-24 12:10:37 by bart
i have an executable that crashes after FSG, send to you?
its FASM
Posted on 2004-05-24 12:11:50 by comrade

install.exe scroller is tooo fast
very nice packer

tooo fast heh, you should see it on my p200, 32ram with some shitty noname gf card, its slow as hell :cool:
Posted on 2004-05-24 12:13:08 by bart
I had read some where that FSG supports mainly TASM/MASM compiled better than any other types
Posted on 2004-05-24 12:13:50 by telophase

i have an executable that crashes after FSG, send to you?
its FASM

fasm crashes? i tested few fasm executables, but shit happens, please send it to me
Posted on 2004-05-24 12:14:53 by bart
.
Posted on 2004-05-24 12:23:35 by comrade
Excellent packer :alright:
Posted on 2004-05-24 12:26:10 by stormix
it also crashes many times when giving an empty command-line, or refuses to recognize parameters from command-line at all
Posted on 2004-05-24 12:28:51 by comrade

Downloaded The file from the link and inturn turned out be a virus :mad:

Mods please delete this post immediately.

Virus: Bloodhound.W32.EP

Scanned By: Norton Antivirus 2004

Please check the links before you submit those :tongue:


Bloodhound is Norton's heuristic virus recognition technology, so when you see virus named like that you know its not real
Posted on 2004-05-24 12:42:18 by comrade
Another one. This might be better to analyze it, as it is much smaller
Posted on 2004-05-24 12:44:57 by comrade
Bart, try this example from fasm-package:

fasmw152\examples\minipad\Minipad.exe .

After fsg 1.33...2.0 - crash (under Win98).
Posted on 2004-05-24 20:50:22 by kero
working on all my applications built under lcc & vc++ also delphi support working great, fantastic work, loader code rocks upx.

sysview.exe packed with fsg 2.0 is faulting on

MOV EAX,DWORD PTR DS: where EBX: 0xA1CA9424
Posted on 2004-05-25 00:29:12 by archphase
ok, i know whats wrong with fasm files, resource data is mixed with resource headers, while all other compilers including delphi, msvc, lcc, masm, tasm doesnt do that (first all headers, then data) and fsg doesnt rebuild whole table (just update it) :(
Posted on 2004-05-25 07:52:33 by bart