Vault of Fail Part 2 RTFM

Discussion in 'The Guru's Pub' started by vbetts, Sep 21, 2018.

  1. alanm

    alanm Ancient Guru

    Messages:
    9,307
    Likes Received:
    1,568
    GPU:
    Asus 2080 Dual OC
     
    386SX likes this.
  2. HeavyHemi

    HeavyHemi Ancient Guru

    Messages:
    6,950
    Likes Received:
    950
    GPU:
    GTX1080Ti
    creepy.JPG
     
    386SX likes this.
  3. 386SX

    386SX Master Guru

    Messages:
    924
    Likes Received:
    917
    GPU:
    AMD Vega64 RedDevil
  4. mbk1969

    mbk1969 Ancient Guru

    Messages:
    9,254
    Likes Received:
    6,134
    GPU:
    GeForce GTX 1070

  5. 386SX

    386SX Master Guru

    Messages:
    924
    Likes Received:
    917
    GPU:
    AMD Vega64 RedDevil
    I am just amazed about the way ... just by my favorite script language.... batch. You could run that in DOS. :D

    Regardless of privileges it is a fail to be prone to such an "amateur" attack. "Order the av to delete itself." ... I cannot say I heard that in a while. :)
     
  6. mbk1969

    mbk1969 Ancient Guru

    Messages:
    9,254
    Likes Received:
    6,134
    GPU:
    GeForce GTX 1070
    You can't run it in DOS because there are not symlinks and junctions in DOS.

    I don`t get your excitement. Any user can simply uninstall AV - what is the difference?
     
  7. 386SX

    386SX Master Guru

    Messages:
    924
    Likes Received:
    917
    GPU:
    AMD Vega64 RedDevil
    The difference is you create a virus to delete a file.
    Place the virus there (eicar) and create a symlink for it. While the AV is scanning the symlink is effective and the antivirus deletes itself instead of the malware.
    Some av have self protection so critical processes cannot be deleted. But then most av software runs at SYSTEM level.
    And an av may delete itself, so that's bypassed from what I understand.
    I am so amazed because this is so easy to reproduce.
    For example if you bomb the av by thousands of viruses at once in one big archive which you extract, you can run most of it because the av cannot keep up with scanning.
    I really like ITsec. That's all. ;)
     
    Caesar likes this.
  8. mbk1969

    mbk1969 Ancient Guru

    Messages:
    9,254
    Likes Received:
    6,134
    GPU:
    GeForce GTX 1070
    Virus is not a "local user". Completely another story.
     
    386SX likes this.
  9. 386SX

    386SX Master Guru

    Messages:
    924
    Likes Received:
    917
    GPU:
    AMD Vega64 RedDevil
    It's the same like I guess we all did earlier some time.
    Patting someone's back, and if he turns around we decently point to some innocent bystander to get the load. :D
     
  10. mbk1969

    mbk1969 Ancient Guru

    Messages:
    9,254
    Likes Received:
    6,134
    GPU:
    GeForce GTX 1070
    [​IMG]

    PS
    Katatsumuri
    sorosoro nobore
    Fuji no yama


    Kobayashi Issa
     
    Last edited: May 1, 2020
    386SX, fantaskarsef and Turanis like this.

  11. mbk1969

    mbk1969 Ancient Guru

    Messages:
    9,254
    Likes Received:
    6,134
    GPU:
    GeForce GTX 1070
    [​IMG]

    ???
     
    386SX and fantaskarsef like this.
  12. mbk1969

    mbk1969 Ancient Guru

    Messages:
    9,254
    Likes Received:
    6,134
    GPU:
    GeForce GTX 1070
  13. mbk1969

    mbk1969 Ancient Guru

    Messages:
    9,254
    Likes Received:
    6,134
    GPU:
    GeForce GTX 1070
  14. mbk1969

    mbk1969 Ancient Guru

    Messages:
    9,254
    Likes Received:
    6,134
    GPU:
    GeForce GTX 1070
  15. mbk1969

    mbk1969 Ancient Guru

    Messages:
    9,254
    Likes Received:
    6,134
    GPU:
    GeForce GTX 1070

  16. Turanis

    Turanis Ancient Guru

    Messages:
    1,627
    Likes Received:
    333
    GPU:
    Gigabyte RX500
    Errmm...
    [​IMG]

    [​IMG]

    [​IMG]


    [​IMG]
     
    386SX, fantaskarsef and mbk1969 like this.
  17. 386SX

    386SX Master Guru

    Messages:
    924
    Likes Received:
    917
    GPU:
    AMD Vega64 RedDevil
    From Amazon, just FYI .... :D

     
    mbk1969 and fantaskarsef like this.
  18. alanm

    alanm Ancient Guru

    Messages:
    9,307
    Likes Received:
    1,568
    GPU:
    Asus 2080 Dual OC
     
    386SX and mbk1969 like this.
  19. mbk1969

    mbk1969 Ancient Guru

    Messages:
    9,254
    Likes Received:
    6,134
    GPU:
    GeForce GTX 1070
  20. gerardfraser

    gerardfraser Ancient Guru

    Messages:
    3,317
    Likes Received:
    742
    GPU:
    R9 290 Crossfire
    Failure on the phone ,while paying respect. Yeah some people do not care at all.

    respect.jpg
     
    Last edited: Jun 11, 2020
    mbk1969 and fantaskarsef like this.

Share This Page