Browse by Tags

All Tags » reversing (RSS)

Phishing on Saturday ...

It’s quite often to happen with average user on the Internet – to recieve spam. Sometimes it advertises some junk, but sometimes it asks user to run some executable which does some magic, for example, it allows to send sms to any mobile operator...
Posted by V. S.
Filed under:

A case of mysterious BSOD at tcpip!TcpIndicateData+22b

1. The causes Recently I was observing strange BSODs on my Vista machine quite periodically when dealing with network applications: [...] Please, read the rest of this post at http://www.shcherbyna.com/?p=117
Posted by V. S.
Filed under: ,

The case of Task Manager that does not kill

Quite long time ago, my friend Vadym Stetsiak described a bug of Task Manager , which allows to disallow (!) the killing of a process, if it's name is lsass.exe. In order to test this bug, you can rename any executable file into lsass.exe, run it...

Undefeatable files & folders in Windows XP SP2 - a bug in SHFileOperationW

Recently I was surprised with one interesting behavior of my Windows XP box. I was playing with long name files and noticed that major part of my shell extensions do not work with files, whose path is longer then 260 symbols. I also noticed, that Windows...
Posted by V. S. | 6 comment(s)

The case of IE7 that would not run

Yesterday I met an interesting behavior of IE7. On one of my computer which runs Windows Server 2003 SP1 I was trying to publish a post to my blog ('the power of IDA'). But I failed to do that. IE7 was crashing when I tried to write something in the editor...
Posted by V. S. | 4 comment(s)

Why does Windows do not provide more flexible API for Shell Context Menu Handlers?

Recently, I came across an interesting situation. My PC (XP SP2) was making some calculations. CPU activity was high. I was surfing through my folders and clicked on one of them using right button of the mouse. The context menu appeared after 10-20 seconds...
Posted by V. S. | 5 comment(s)

OllyDbg, Windows XP SP2 (32-bit) and Kaspersky Antivirus

I use OllyDbg debugger from time to time. The most wonderful debugger I ever seen: it's light, powerful and does not require installation ... This evening I got a few BSOD's on my Windows XP SP2 after running OllyDbg. So I started the investigations...
Posted by V. S. | 3 comment(s)
Filed under:

Sometimes you DO need to invent the wheels

There is a well-known approach that states ' there is no need to re-invent the wheel '. In other words, it means that if you decided to implement some functionality in your program, you should googlize to make sure it's not implemented by...
Posted by V. S. | 1 comment(s)
Filed under:

IE 7 Beta 3 bugs ...

I installed yesterday IE 7 Beta 3 (for XP SP2 32bit) and now I realize that it contains a lot of bugs. It crashes mostly when you navigate to "specific urls". Here is the steps to reproduce: - login to msmvsps.com - goto http://msmvps.com/ControlPanel...
Posted by V. S.
Filed under:

Finally Microsoft implemented InternetReadFileExW function ...

Some time ago I was surprised when noticed that UNICODE version of WinInet function InternetReadFileEx is not implemented. Disassembling wininet.dll gave me the following results: .text:000007FF7D0D16A0 ; InternetReadFileExW proc near .text:000007FF7D0D16A0...
Posted by V. S.
Filed under: