Re: [ros-dev] ReactOS and Viruses

[K McI]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jasper van de Gronde wrote:
| The PE format already allows for something like this (although it might
| be very insecure, I don't know), see the Checksum field in section:
| 3.4.2. Optional Header Windows NT-Specific Fields (Image Only)
| Of pecoff.doc:
| http://www.microsoft.com/whdc/system/platform/firmware/PECOFF.mspx

They don't seem to say the algorithm used, but it's likely MDx (4 or 5),
both of which have been cracked (Feel free to correct me), so that might
not be too good. Also the verification is done via a DLL called
"IMAGHELP.DLL", which we may or may not have. Also, I'm not sure if the
"image" refers to a picture, or some other binary construction (You can
tell I'm a newbie ;)).

~             -uniQ
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.5 (MingW32)
> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
>
> iD8DBQFBpE1w7mze81O92HkRAuqSAJ9nJz7tUz8Vflv5CIL5DCCitcYoDACcCEEr
> w0DLkWPosBm8T0G+1syL8F0=
> =RyYt
> -----END PGP SIGNATURE-----