Full Disclosure mailing list archives

Re: DSplit - Tiny AV signatures Detector


From: "ad () heapoverflow com" <ad () heapoverflow com>
Date: Sat, 04 Mar 2006 13:09:57 +0100

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
yeah already knowing they are most fucking bastards

Alexander Hristov wrote:
Clamav detects it and can unrar it with the unrar module

On 3/3/06, ad () heapoverflow com <ad () heapoverflow com> wrote: DSplit
is the small brother of an old tool known as UKsplitter wich is now
abandonned, does not work in vmware, fails to run under windows
2003.

DSplit has been coded for persons like me, targeted by AV firms and
 I'm not responsible of the bad uses of it, I recall this method is
known since a long time and it's up to the AV firms to review their
detections software.

http://heapoverflow.com/dem0s/Dsplit-patching_DFind_on_Symantec_Corporate.htm
 http://getdsplit.class101.org

usual critics , flames, can be directly sent to the Recycle Bin :>

_______________________________________________ Full-Disclosure -
We believe in it. Charter:
http://lists.grok.org.uk/full-disclosure-charter.html Hosted and
sponsored by Secunia - http://secunia.com/


-- Best Regards, Aleksander Hristov < root at securitydot.net > <
http://securitydot.net >




-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
 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=+V3s
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: