wendroid on Dr Mark Gasson "infected" himself with a computer virus

Comment on Dr Mark Gasson "infected" himself with a computer virus parent

Was the first thing I got sent this morning.

You've got to be pretty stupid to do this :

    S: any RFIDs around with code for me to execute
    C: sure, here's some 0x1fab214bab3421baeb3f2d287d20d8297d2
    S: Thank yo ... Connection reset by peer

sp332 16y

Don't run this, just put it in a .txt file and run a virus scanner on it:

  X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

OK, it's actually harmless, but it's the only pure-ASCII executable I've ever seen, which is pretty cool.

wendroid 16y

sp332 16y

I think http://mirror.href.com/thestarman/asm/eicar/eicarcom.html is a better link for that

wendroid 16y

Interesting read but

> That it be a normal DOS program capable of producing the same results under WINDOWS as well as real DOS mode.

so it's pretty useless to me

sesqu 16y

I'm not so sure about that. All you need is a bit of buffer overrun, reflection, or poor escaping mechanisms - and none of those are exactly rare.

Here's a 2006 article on RFID+buffer overflow tat wikipedia pointed me at: http://arstechnica.com/old/content/2006/03/6386.ars

Comments