| 's VADV-PHP Home |
|
|
Message Area
Casually read the BBS message area using an easy to use interface. Messages are categorized exactly like they are on the BBS. You may post new messages or reply to existing messages! You are not logged in. Login here for full access privileges. |
| Previous Message | Next Message | Back to [GNG] Gated, Filtered alt.comp.a... <-- <--- | Return to Home Page |
|
||||||
| From | To | Subject | Date/Time | |||
|
not | All | Re: Kaspersky Rescue Disk Report - can't see full paths |
June 5, 2019 8:19 PM * |
||
From: "Apd" <not@all.invalid> "Paul" wrote: > When you look at the klr.enc1 files, what's the first > thing you notice ? There's a couple of groups of 0xCF hex > bytes. "Real" encryption would have high entropy. > This smells funny... > > CF CF CF CF CF CF CF CF CF CF CF CF It smells like spaces! XOR the base64 with 0xEF and you have plain text with a single linefeed terminating each line. It's an XML report. Here's a line from your second example, krdeicar.txt (wrapped for ease of reading): <Event1 Action="Detect" Time="132042218823887019" Object="@Filesystem[65ba0377-31a7-52e4-8e5b-5415b3a73f12]/Downloads/EICARAntiVi rusTestFile.com" Info="EICAR-Test-File" /> --- NewsGate v1.0 gamma 2 * Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4) |
||||||
|
||||||
[GNG] Gated, Filtered alt.comp.a... 
| Previous Message | Next Message | Back to [GNG] Gated, Filtered alt.comp.a... <-- <--- | Return to Home Page |
Execution Time: 0.0762 seconds If you experience any problems with this website or need help, contact the webmaster. VADV-PHP Copyright © 2002-2024 Steve Winn, Aspect Technologies. All Rights Reserved. Virtual Advanced Copyright © 1995-1997 Roland De Graaf. |