Comments on: Malware specifically targeting Delphi http://jamiei.com/blog/2009/08/malware-specifically-targeting-delphi/ Delphi Programming, Web Development, General Technology and, of course, Midget Gems Sun, 18 Dec 2011 20:37:13 +0000 hourly 1 http://wordpress.org/?v= By: Senthil Kumar B http://jamiei.com/blog/2009/08/malware-specifically-targeting-delphi/comment-page-1/#comment-715 Senthil Kumar B Tue, 09 Feb 2010 12:25:22 +0000 http://jamiei.com/blog/?p=404#comment-715 I had the same problem too but the symptoms were different I had the same problem too but the symptoms were different

]]> By: GSA http://jamiei.com/blog/2009/08/malware-specifically-targeting-delphi/comment-page-1/#comment-479 GSA Tue, 25 Aug 2009 13:17:53 +0000 http://jamiei.com/blog/?p=404#comment-479 GSA has developed a freeware tool that could remove the Win32/Induc.A virus completely from executables and let you start them again without your anti virus complaining about it. GSA has developed a freeware tool that could remove the Win32/Induc.A virus completely from executables and let you start them again without your anti virus complaining about it.

]]> By: ninken http://jamiei.com/blog/2009/08/malware-specifically-targeting-delphi/comment-page-1/#comment-472 ninken Wed, 19 Aug 2009 00:12:37 +0000 http://jamiei.com/blog/?p=404#comment-472 Delphi seems to be a good tool for hackers too, anyone remember hacker defender? It started off a "Hardware Driver" project, that turned into a rootkit tool to take over PC's. I guess they needed some income to support there project. Delphi seems to be a good tool for hackers too, anyone remember hacker defender? It started off a “Hardware Driver” project, that turned into a rootkit tool to take over PC’s. I guess they needed some income to support there project.

]]> By: Javier Santo Domingo http://jamiei.com/blog/2009/08/malware-specifically-targeting-delphi/comment-page-1/#comment-471 Javier Santo Domingo Tue, 18 Aug 2009 18:15:19 +0000 http://jamiei.com/blog/?p=404#comment-471 I think "the motives of it’s author" its not big deal at all. Lets imagine... a -"bad"- junior programmer working in some company could easily write that -ugly- code to infect the machines of his coworkers and drop in other machines (company clients, for example) some trojan (in a modified version of the posted code). What about a "botnet" or stuff like that? Lamers love that stuff to call themselves "hackers"... its just more of that big old discussion. That may explain the appearance of this "malware", and i think there are also other childish reasons that it's author could have. Anyway, the important thing is that there is no reason to panic at all, but we should pay attention that this kind of stuff can happen, even in the company you work. I think “the motives of it’s author” its not big deal at all.
Lets imagine… a -”bad”- junior programmer working in some company could easily write that -ugly- code to infect the machines of his coworkers and drop in other machines (company clients, for example) some trojan (in a modified version of the posted code). What about a “botnet” or stuff like that? Lamers love that stuff to call themselves “hackers”… its just more of that big old discussion.

That may explain the appearance of this “malware”, and i think there are also other childish reasons that it’s author could have.
Anyway, the important thing is that there is no reason to panic at all, but we should pay attention that this kind of stuff can happen, even in the company you work.

]]> By: Aleksey Timohin http://jamiei.com/blog/2009/08/malware-specifically-targeting-delphi/comment-page-1/#comment-470 Aleksey Timohin Tue, 18 Aug 2009 17:29:31 +0000 http://jamiei.com/blog/?p=404#comment-470 Thank you for you response. That's ok, i suppose. I wrote this comment, just because your post if first post about this virus in DelphiFeeds (in russian-speaking Delphi communities, this virus is known and discussed for last 7 days), so I'd like to ensure, that the whole story was told correctly. :) Here's more details: There's a poll on the left side of Gunsmoker's blog, that shows, that nearly 40% of russian-speaking programmers have found that virus. (mostly because of using popular russian IM client Qip and Aimp, in which the virus was identified first). Not sure, that in other communities virus is spread as much. But there are some third-party components and libraries that can contain that "virus". F-secure blog, just mentioned that source, giving the link to Gunsmoker's blog, without specifying his job. Btw, you can use Google.Tranlsate to translate russian blogs. Here is the link: http://translate.google.com/translate?prev=hp&hl=en&js=y&u=http://gunsmoker.blogspot.com/2009/08/delphi-delphi.html&sl=ru&tl=en Thank you for you response.

That’s ok, i suppose. I wrote this comment, just because your post if first post about this virus in DelphiFeeds (in russian-speaking Delphi communities, this virus is known and discussed for last 7 days), so I’d like to ensure, that the whole story was told correctly. :)

Here’s more details:

There’s a poll on the left side of Gunsmoker’s blog, that shows, that nearly 40% of russian-speaking programmers have found that virus. (mostly because of using popular russian IM client Qip and Aimp, in which the virus was identified first). Not sure, that in other communities virus is spread as much. But there are some third-party components and libraries that can contain that “virus”.

F-secure blog, just mentioned that source, giving the link to Gunsmoker’s blog, without specifying his job.

Btw, you can use Google.Tranlsate to translate russian blogs. Here is the link: http://translate.google.com/translate?prev=hp&hl=en&js=y&u=http://gunsmoker.blogspot.com/2009/08/delphi-delphi.html&sl=ru&tl=en

]]> By: jamiei http://jamiei.com/blog/2009/08/malware-specifically-targeting-delphi/comment-page-1/#comment-469 jamiei Tue, 18 Aug 2009 16:58:02 +0000 http://jamiei.com/blog/?p=404#comment-469 @Aleksey - Apologies to whomever is behind the Gun Smoker blog, I did not intentionally snub the people who worked hard to identify and document the malware. Instead I simply didn't realise who had originally discovered it as the F-Secure blog entry was not explicit on the matter and the original Gun Smoker post linked to was in Russian. @Aleksey – Apologies to whomever is behind the Gun Smoker blog, I did not intentionally snub the people who worked hard to identify and document the malware. Instead I simply didn’t realise who had originally discovered it as the F-Secure blog entry was not explicit on the matter and the original Gun Smoker post linked to was in Russian.

]]> By: Aleksey Timohin http://jamiei.com/blog/2009/08/malware-specifically-targeting-delphi/comment-page-1/#comment-468 Aleksey Timohin Tue, 18 Aug 2009 15:18:15 +0000 http://jamiei.com/blog/?p=404#comment-468 FYI: Indeed, virus was discovered (found) by russian programmer "Gun Smoker" http://gunsmoker.blogspot.com/ Not F-Secure team has found that virus. Please, show respect for people made hard work. FYI:
Indeed, virus was discovered (found) by russian programmer “Gun Smoker” http://gunsmoker.blogspot.com/

Not F-Secure team has found that virus. Please, show respect for people made hard work.

]]>