Infected Mind

I’m suffering from severe hiatus from vx scene, if  I survived it then I would be an invincible vxer!

Obama appears that he gave a speech about cyber security, I wasn’t aware of it until found this link  on F-secure! ..__Link I hope this won’t have any preperatory law that adds to other laws which are affecting hobiest(VXers) more, cause the hobbiest VXers already  are struggling for right and time to code!

I was just reviewing 29A articles when I stumbled into one article from Mental Driller he explained some stuff about vx writing, and mentioned some bugs in kernel32 win2k api GetModuleHandleA() if set direction flag is set before calling the function, amusingly I went to test it if such bug still there and yes it still persists on Vista/x86 .

DoomRiderz went back to hell ,Wargame returned back and embraced by EOF,welcome back man.

For me, I moved my lazy ass a little bit ,and updated FakedM!nded boundries_ , putting the stuff I contributed in EOF/DR/RRLF zine .

So much for today, lets back to sleep I might dream of ‘THE’ Code .

The joint zine published and you can download it from:

http://www.eof-project.net/files/magazine/EOF-DR-RRLF.rar

or from other mirrors (thanx to gedzac and vx-heaven):

http://vx.netlux.org/vx.php?id=ze02

and

http://www.gedzac.com/EOF-DR-RRLF.rar

Again thanx to Gedzac for providing an online version to the zine:

http://www.gedzac.com/rrlf.dr.eof.eZine/

From describing 29A as a virus reasearch group (symantec) to describing them as a gang!!(sophos) , one thing interrupted my mental masturbation:

“But somehow, we feel this is probably not the last time we’ll hear from this motley crew” –Posted by Symantec Security Response

Now a Security blog starts to tell future!

  Avers may feel victorious, Glad, Horny! The satan of their religion is gone,  but this monster got defeated by time and other things rather than  Avers ridiculous blogs and products!

From my point of view 29A was dying since their last zine, and fairly I dislike the word ‘dead’ for a group like 29A ,since their great work still motivating alot of new vxers.

At the end..

Farewell 29A you were the orgasm of the scene that never reached such pleasure and satisfaction before!
for more info visit the 29A site

I paid a visit to the norman sandbox,which I found this code couldbe enough to bypass norman sandbox emulator edtection and somehow f-secure emulator too(not sure 100% about the latter), see the following code: Read the rest of this entry »

Today I noticed the option on virustotal.com (“Dont distribute sample”) was disabled ,they put an explanation for that on their blog ,in short they explained that decision was taken as a result of the continuous AVers complaints about how its been used by virii developers to create new UD samples.

Well… Read the rest of this entry »

Happy new year everybody……..

call @f
push 0c3h
@@:
pop edx
jmp $-5