The Launch, Gaara and Aslan.
Piotr Bania (Piotr) <baniapiotrgmailcom> Saturday, June 2 2007 12:18.00 CDT



Recently Ive moved from my OpenRCEs blog to this one, so i hope this would be somehow better. I hope i will not get disappointed.

Anyway, if you dont remember few days ago ive released a proof of concept virus for Texas Instruments calculators, named as Gaara. Gaara is a worlds first entry-point-obscuring resident virus for calculator platforms. Currently, you can read about it on the Symantecs WEBLOG or the KAVs one, or even the McAfee one. Also Symantec was the first one to shoot a more or less full description of Gaara, and KAV was the first one to setup up a dectection for it, although i dont know if they have created new kernel specially for M68Ks or its just a plain signature detection. Anyway writting Gaara was pretty entertaining job, even that AVs changed its name to Tigraa :/ *juck*

NOTE: Tomorrow im going to release two sample disinfector programs for the Gaara virus.Till then please stay tunned.

Yesterday, ive opened a sub-website regarding my incomming integrating-metamorphic engine, called Aslan (4514N). Ive added few photos, some old demos, and some screenshot from BinDiff which i got from Halvar.I hope you will find it somehow interresting, as always if you want to support me or give me some proper advices feel free to do so. Fortunately this university semester is comming to an end, and i may have more time to play with Aslan.

Well, seems it is enough for a first post here :) Cheers.



Comments
Posted: Wednesday, December 31 1969 18:00.00 CST