cjdelphi

I started experimenting (as you do when you're a bored programmer) last version of OBK annoyed me in the sense that if you started booting someone regardless of connection it shows you how much data (if you had an extremely unrealistic connection)

What i did to test this was i created my own server on 5085 (simulated a yahoo server) and i was managing to peak my transfer rate over a single socket at >400k/s without any optimization. Reason for trying this was simply because at the moment my up and download speed is 64kbit with a max of 8k/s... so i emulated the server to see what it could do in theory and in theory if you have a good upload speed you too can blast someone at 400k/s across the yahoo network.

Now then, this version is totally accurate if you have a slow upload speed this will look like it's crawling, this shows how many packets what you CAN upload as supposed to most (including my own) what you really are getting.

in programming terms if you send "Hello" what you're actually doing (if it's a none blocking socket) is you send "Hello" and it returns instantly, if you send a 10k string of "hello hello hello" under async it returns back instantly even though there's no way on this planet it was sent that quickly, internally what happens is your string gets sent to winsock and winsock will buffer your string and then send it piece by piece, now while this is happening your timer which happens every 1 - 10ms gets called and again it tries to send 10k again, this time the routine sends back -1 meaning "no no you gave me data, wait...." and every 5 ms you'll get -1 until 8 seconds or so later on a slow connection you'll get back 80222 or whatever to say yes we just took the data, now you'll get -1 again lol

Winsock handles a nice large buffer to send, you could send 100k's worth and just sit there for 30 seconds not sending anything again it's left control of the program and programmer and windows deals with it internally, so i explored this and wrote a nice little 1 second timer resolution bandwidth calculator to watch it properly



[Only registered users can see links. ]

From now on i'm going to taking a similar line to all my apps for a true representation not a "super fast connection that only exists on a 1gigabit lan"

..:::bimbim:::..

scan result.


OtHer link


[Only registered users can see links. ]

[Only registered users can see links. ]

[Only registered users can see links. ]

[Only registered users can see links. ]

cjdelphi

what the hell ? mass email? that's a new one, i'm going to check this out for myself something tells me the scan is not of obk.

__ChAnDLeR__

cjdelphi

i just checked, it does too, that's ridiculous uploading just the dll gives 3 false positives, and the exe when uploaded by itself gives not finished uploading the file but i just had a thought, i compiled this with eurekalog and that has email capabilities

i'll have to remove that crap :| just realized this program's going to show people the source code if it finds a problem

LOL!!!

bah, still interesting though

[Only registered users can see links. ] for anyone who uses BCB / Delphi it compiles directly into the program doing real time memory checks/memory leaks it has the ability to send off an error report with the line number stack dump and other info, pretty nifty if anyone finds any memory leaks or issues let me know :) lol

(---kabron---)

bro i scan the exe file burt same result Heuristic: Suspicious File With Mass Email Capabilities..

cjdelphi

As i said, i forgot i had eurekalog running it attaches itself to every project you compile


[Only registered users can see links. ]

I removed eurkalog and compiled it again, now it should be back to showing perfectly clean.

~~ViT~~

p1mp1n

VirSCAN.org Scanned Report :
Scanned time : 2008/03/27 22:48:47 (CST)
Scanner results: 6% Scanner(2/36) found malware!
File Name : OBK.exe
File Size : 1435648 byte
File Type : MS-DOS executable (EXE), OS/2 or MS Windows
MD5 : cc28584eac38cf838d28f443d2697372
SHA1 : b785e4137aa6b98a611263edf712f4cf93db05d4
Online report : [Only registered users can see links. ]
Scanner Engine Ver Sig Ver Sig Date Time Scan result
A-Squared 3.0.0.126 2008.03.26 2008-03-26 4.04 -
AhnLab V3 2008.03.27.01 2008.03.27 2008-03-27 3.18 -
AntiVir 7.6.0.75 7.0.3.83 2008-03-27 9.50 -
Arcavir 1.0.4 200803261556 2008-03-26 3.54 -
Avast 1.0.8 080326-3 2008-03-26 3.06 -
AVG 7.5.51.442 269.21.8/1345 2008-03-26 2.38 -
BitDefender 7.60825.1032935 7.18208 2008-03-27 3.82 -
CA (VET) 9.0.0.143 31.3.5648 2008-03-27 17.45 -
ClamAV 0.92 6421 2008-03-27 0.27 -
Comodo 2.11 2.0.0.477 2008-03-27 1.39 -
CP Secure 1.1.0.715 2008.03.27 2008-03-27 19.36 -
Dr.Web 4.44.0.9170 2008.03.27 2008-03-27 18.89 -
Ewido 4.0.0.2 2008.03.27 2008-03-27 3.10 -
F-Prot 4.4.1.52 20080327 2008-03-27 2.40 -
F-Secure 5.51.6100 2008.03.27.05 2008-03-27 0.12 -
Fortinet 2.81-3.11 8.892 2008-03-27 2.67 -
ViRobot 20080327 2008.03.27 2008-03-27 0.89 -
Ikarus T3.1.01.20 2008.03.24.70498 2008-03-24 5.02 -
JiangMin 10.00.650 2008.03.27 2008-03-27 2.14 -
Kaspersky 5.5.10 2008.03.27 2008-03-27 24.57 -
KingSoft 2007.6.20.249 2008.3.28 2008-03-28 1.83 -
McAfee 5.2.00 5258 2008-03-24 9.36 -
Microsoft 1.3301 2008.03.27 2008-03-27 8.56 -
mks_vir 2.01 2008.03.27 2008-03-27 12.07 -
Norman 5.91.10 5.90 2008-03-25 16.00 -
Panda 9.04.03.0001 2008.03.26 2008-03-26 3.71 -
Trend Micro 8.500-1001 5.190.05 2008-03-27 0.05 -
Prevx V2 20080327 2008-03-27 5.93 TROJAN.DOWNLOADER.GEN
Quick Heal 9.00 2008.03.27 2008-03-27 4.25 -
Rising 20.0 20.37.32.00 2008-03-27 3.09 -
Sophos 2.71.3 4.27 2008-03-25 11.40 -
Symantec 1.3.0.24 20080326.004 2008-03-26 0.89 -
nProtect 2008-03-27.00 1255914 2008-03-27 6.29 -
The Hacker 6.2.92 v00256 2008-03-26 1.69 -
VBA32 3.12.6.3 20080326.1650 2008-03-26 7.28 Backdoor.XiaoBird.1 (suspicious)
VirusBuster 4.3.19:9 9.123.22/11.0 2008-03-26 6.16 -

I Just Added A New Rescan For The New Link

porkbonekid

man how many rescans do you need to post? none of craigs programs have ever been infected when downloaded from his source directly, so theres really no need for multiple scans. if you choose to download the program from anyone but him then you deserve to be infected besides its best to download and scan things yourself anyway, these days photoshop can make lies out of scan result posts ;)

as for the program its pretty entertaining nice little eye opener there, i been having a little fun this morning with it good stuff!