The Official Feeding Waters of SharkPost

Info Menu

Release Notes

Features

Download Page

Screenshot Gallery

Awards

Home

News

Malware Free

After many years of Usenet trolls maliciously claiming that Sharkpost contained Malware, Bughunter author Dustin Cook has confirmed there is absolutely no malicous code within Sharkpost. Already debunking many of the lies within the first post: Striking while it was hot making this statement:

^{_{You couldn't even determine the executable packer applied (it's sprotect), so it's no wonder you think it somehow has hidden magic code.}}

with a public invitation from Usenet trolls to inspect the source code, as well as the binary, to gather and report any findings of malicious code (or Malware), Dustin took up the challenge. After a complete and extensive examination of the source code and binary in question, Dustin returned to make these statements:

_{I have analyzed both binaries available on http://www.exscientia.org/content/akula_tools.html

As well as the binary currently available from pricelesswarehome.org; a freeware site that it's}

_{users decide what software should be listed based on various factors. Both programs were}

_{scanned first by BugHunter, no hits. Both programs were then submitted to virustotal.org,}

_{virusscan.jotti.org and virus.org. Finally, I have reverse engineered both executables and ran}

_{them via sandboxie and allowed them to simulate posting to usenet via a virtual lan.

Neither of the programs appears to do anything malicious, although I must say the port isn't}

_{much better? than the original. I repeat, I have found no malicious code in the binaries I}

_{have tested so far. The programs aren't expertly protected executables either, I'm afraid.}

_{Their both protected with ASPROTECT, which takes all of 2 seconds on this machine to}

_{reverse. :) The binaries are written in microsoft visual c, and do require access to various}

_{windows dlls for the network functions.

I have allowed both programs virtual access to a network, and monitoring the packet data.}

_{I have found nothing encrypted, nothing hidden, and no personal identification information}

_{that's any different than what your machine would send to a server anyway.}

_{e: As far as I can tell so far, neither program calls home, neither program has routines to call}

_{home. Both programs pass along the information you provide to the windows tcpip stack, they}

_{make no effort to contact any servers/ips outside that string.}

His comments on the Usenet trolls website promoting his libelous claims:

_{I've read the site, and have issues with various comments on it. The narcware you speak of I have not been able to}

_{locate a copy of this malicious binary or verify any of the other claims on the site. The article claims that the binary}

_{is protected and cannot be examined due to this. The binaries I have examined are packed with asprotect, but that}

_{shouldn't deter anyone fairly good with code/cracking from unpacking it.

The highly suspicious comments not withstanding, I have been unable to find any code in any binary I've examined}

_{so far to backup any of the suspicious claims. If anything, it's my opinion so far, that the claims have been made by}

_{someone suffering from severe dillusions, and that of someone who doesn't actually write code. I wouldn't therefore,}

_{suggest that site as a knowledgable source of information at this time.}

After releasing this statement Dustin had a forged post contridicting his statements and supporting the Usenet terrorists who have been maliciously spreading these gross and distorted lies about the program and it's author.

Authors note: With actions like these, it isn't difficult to see why no adult would take someone who exhibits severe dillusions seriously.

Set as favorite

Bookmark

Email This

Comments (1) add comment