There's a new version of the (100%) Lamer frontend, BUT my F-prot virusscanner says it's a suspicious file ("could be infected with an unknown virus") :confused:

Anybody wants to download the new Lamer and scan it with his/her virusscanner?

Link: http://www.1oo-percent.de/lamer/

I downloaded the latest version (1.20 beta), and McAfee VirusScan didn't complain when I run it.

Probably just a false alarm in your case.

My Norton AV didn't detect anything suspicious about it.

Thanx a lot! I'm going to try Lamer right away. Always liked it. But the guy also calls himself Devil, so I was in doubt...

I did a quick check on the lamer.exe file. F-PROT reports it because it's probably compressed with some unknown PE-EXE compressor. The code entrypoint (RVA) is at the end of the file and it has imports to critical system functions that trojans/viruses often use (Winsock access, registry access). I will unpack it this evening and have a deeper look at the code.

But honestly, if someone wanna hide a virus or trojan code in a normal program, the possibilities are virtually unlimited. I wish there would be good behaviour blocker for Windows. :-(


bye, Skeeve