Comments on: Damn Pigeons! 灰鸽子 http://www.thedarkvisitor.com/2007/12/damn-pigeons/ Sat, 24 Dec 2011 19:52:10 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: The Dark Visitor » Chinese hackers taking advantage of Microsoft “Black Screen of Death” http://www.thedarkvisitor.com/2007/12/damn-pigeons/comment-page-1/#comment-1330 The Dark Visitor » Chinese hackers taking advantage of Microsoft “Black Screen of Death” Thu, 23 Oct 2008 03:59:57 +0000 http://www.thedarkvisitor.com/?p=209#comment-1330 [...]  The only problem is that these are fake solutions and they come bundled with malware such as the Gray Pigeon trojan designed to allow remote control of the [...] [...]  The only problem is that these are fake solutions and they come bundled with malware such as the Gray Pigeon trojan designed to allow remote control of the [...]

]]> By: Heike http://www.thedarkvisitor.com/2007/12/damn-pigeons/comment-page-1/#comment-231 Heike Thu, 27 Dec 2007 00:03:43 +0000 http://www.thedarkvisitor.com/?p=209#comment-231 Jumper, Sorry, I missed your reply on this! Great input, glad you are on our side. Yeah, I couldn't get some of the images to load either and it isn't just your Chinese. Made my head hurt. Jumper,

Sorry, I missed your reply on this! Great input, glad you are on our side. Yeah, I couldn’t get some of the images to load either and it isn’t just your Chinese. Made my head hurt.

]]> By: jumper http://www.thedarkvisitor.com/2007/12/damn-pigeons/comment-page-1/#comment-230 jumper Wed, 26 Dec 2007 01:23:41 +0000 http://www.thedarkvisitor.com/?p=209#comment-230 你好， The article is a discussion of the features of the trojan. It is a pretty typical remote access trojan. The images that show 1.exe open in notepad display the "MZ" header that identifies a file as a Windows portable executable. The notepad image also shows the QQ numbers that 1.exe pages when the user goes online. Interesting that the trojan wasn't packed though. There are much better tools than notepad to find strings in a PE file though. Whatever works, I guess. 1.exe is almost certainly built with a tool that lets the user define what QQ numbers to page to, what ports to use and so on. I couldn't get a lot of the images to load on the page and my 中文 isn't good enough to make sense without the images. The online translators aren't very good at translating these sites. 你好，

The article is a discussion of the features of the trojan. It is a pretty typical remote access trojan. The images that show 1.exe open in notepad display the “MZ” header that identifies a file as a Windows portable executable. The notepad image also shows the QQ numbers that 1.exe pages when the user goes online. Interesting that the trojan wasn’t packed though. There are much better tools than notepad to find strings in a PE file though. Whatever works, I guess. 1.exe is almost certainly built with a tool that lets the user define what QQ numbers to page to, what ports to use and so on.

I couldn’t get a lot of the images to load on the page and my 中文 isn’t good enough to make sense without the images. The online translators aren’t very good at translating these sites.

]]> By: Heike http://www.thedarkvisitor.com/2007/12/damn-pigeons/comment-page-1/#comment-229 Heike Fri, 21 Dec 2007 23:48:32 +0000 http://www.thedarkvisitor.com/?p=209#comment-229 Jumper, You got me stumped there. Not a term I am familiar with. Since it literally means a baby pigeon, it might translate close to the same as 菜鸟, which is newby. If you give me a sentence I can probably get you closer. You won the last "who is this" contest. However, today we are looking for "灰鸽子." Good luck to all our contestants! Jumper,

You got me stumped there. Not a term I am familiar with. Since it literally means a baby pigeon, it might translate close to the same as 菜鸟, which is newby. If you give me a sentence I can probably get you closer.

You won the last “who is this” contest. However, today we are looking for “灰鸽子.” Good luck to all our contestants!

]]> By: jumper http://www.thedarkvisitor.com/2007/12/damn-pigeons/comment-page-1/#comment-228 jumper Fri, 21 Dec 2007 21:37:10 +0000 http://www.thedarkvisitor.com/?p=209#comment-228 What the heck does (乳鸽) mean in a hacking context? I've been wondering for a while now. I see this all the time. Also, sometimes chicken (I think). What the heck does (乳鸽) mean in a hacking context? I’ve been wondering for a while now. I see this all the time. Also, sometimes chicken (I think).

]]>