Author Topic: Assembler, .exe file being deleted...apparently  (Read 364 times)

hutch--

  • Administrator
  • Member
  • ******
  • Posts: 10572
  • Mnemonic Driven API Grinder
    • The MASM32 SDK
Re: Assembler, .exe file being deleted...apparently
« Reply #15 on: March 18, 2023, 10:32:45 PM »
 :biggrin:

The only thing that it could learn from me is how to write assembler. I download it, run it then delete it.
hutch at movsd dot com
http://www.masm32.com    :biggrin:  :skrewy:

Vortex

  • Member
  • *****
  • Posts: 2768
Re: Assembler, .exe file being deleted...apparently
« Reply #16 on: March 19, 2023, 12:18:46 AM »
It's easy to detect the network connections with an application like NirSoft's CurrPorts.

C3

  • Regular Member
  • *
  • Posts: 33
Re: Assembler, .exe file being deleted...apparently
« Reply #17 on: March 19, 2023, 03:42:19 AM »
Quote
It's easy to detect the network connections with an application like NirSoft's CurrPorts.

Another good one is the Microsoft Sysinternals Suite's TCPView. There is many usefull pieces of software in that Suite, I also recommend Process Explorer.

hutch--

  • Administrator
  • Member
  • ******
  • Posts: 10572
  • Mnemonic Driven API Grinder
    • The MASM32 SDK
Re: Assembler, .exe file being deleted...apparently
« Reply #18 on: March 19, 2023, 06:46:38 AM »
 :biggrin:

Microsoft Sysinternals is very useful software, comes at the right price and can do many useful things. Among many, the Process Explorer is a tool that I use on enough things to kep it directly on my desktop.

As far as software origins go, I use software from around the world, (none from Antarctica yet) and evaluate it by its performance, not a country's politics.
hutch at movsd dot com
http://www.masm32.com    :biggrin:  :skrewy:

jj2007

  • Member
  • *****
  • Posts: 13872
  • Assembly is fun ;-)
    • MasmBasic
Re: Assembler, .exe file being deleted...apparently
« Reply #19 on: March 19, 2023, 02:45:23 PM »
@Hutch
be careful as kaspersky is a well known russian digital weaponry
according to some rumours it has backdoors..

Check here (found googling kaspersky backdoor):
Quote
Kaspersky’s malware scanner has been tested as recently as fall of 2022 by major testing labs. Such labs as AV-Comparatives and AV-Test showed that Kaspersky performed extremely well, capturing 100% of zero-day malware and 100% of widespread malware, with an excellent result of 0 false positives.

Further down, there's a text to make the NSA happy: "We don’t recommend getting Kaspersky because of its ties to Russia’s Federal Security Service (FSB)." :greensml:

Check also Kaspersky's blog. Of course, you cannot fully exclude the possibility that the Russians are spying on your machine. However, using logic, it would appear that Kaspersky would shoot themselves in the foot if, suddenly, the Internet was full of stories saying Kaspersky software intercepted your online banking password and transferred Millions to support Putin's war. Right?

Quote
Founded in 2004, Kaspersky North America is a Massachusetts corporation and is a wholly-owned subsidiary of its holding company, Kaspersky's Limited, based in the United Kingdom.

We are one of the world’s largest privately owned cybersecurity companies. We operate in 200 countries and territories and have 35 offices in 31 countries. Over 4,000 highly-qualified specialists work for Kaspersky.

We are a global company, with a global vision and a focus on international markets. Our global unaudited IFRS revenue for 2017 totaled USD 698 million.

Our independence allows us to be more agile; to think differently and act faster. We are forever innovating, delivering protection that’s effective, usable and accessible. We pride ourselves on developing world-leading security that keeps us – and every one of our 400 million users protected by our technologies, and 270,000 corporate clients – one step ahead of potential threats.

Of course, if Hutch finds out that Klaus Schwab owns Kaspersky shares, then... but I digress, sorry :badgrin:

hutch--

  • Administrator
  • Member
  • ******
  • Posts: 10572
  • Mnemonic Driven API Grinder
    • The MASM32 SDK
Re: Assembler, .exe file being deleted...apparently
« Reply #20 on: March 19, 2023, 03:41:46 PM »
 :biggrin:

> Further down, there's a text to make the NSA happy: "We don’t recommend getting Kaspersky because of its ties to Russia’s Federal Security Service (FSB)."

Substitute "Russia" with the US, UK, Canada, Europe, China, Formosa and many others, they all hold true. All governments say nasty things about their political enemies.

PS : You have to be careful about Count Vlad, he was not only in the KGB but used to be a communist.  :badgrin:

If the MOSSAD can hack my PC, they (and any other) will learn how to write assembler.  :joking:
hutch at movsd dot com
http://www.masm32.com    :biggrin:  :skrewy:

riversr54

  • Regular Member
  • *
  • Posts: 17
Re: Assembler, .exe file being deleted...apparently
« Reply #21 on: March 20, 2023, 08:48:17 AM »
Ok, maybe the code is not perfect, but that is not the point. The point is that the exact same code runs perfectly on my computer but will not run (no .exe found) on student computer. We've added the folder to the exclusion list and disabled Windows Defender (Virus and Thread Protection) but still have the same problem. I'm looking into the possibility that it is a Visual Studio Configuration problem. That seems to be only thing that makes any sense right now.

riversr54

hutch--

  • Administrator
  • Member
  • ******
  • Posts: 10572
  • Mnemonic Driven API Grinder
    • The MASM32 SDK
Re: Assembler, .exe file being deleted...apparently
« Reply #22 on: March 20, 2023, 09:04:54 AM »
These are a real pain to track down, the things I have had to do on my own computers to research the problem are on Win10 Pro so find out if its an issue with Win10 Home. As usual, try out some other code samples to see if it happens on all small code or just that one.
hutch at movsd dot com
http://www.masm32.com    :biggrin:  :skrewy:

Vortex

  • Member
  • *****
  • Posts: 2768
Re: Assembler, .exe file being deleted...apparently
« Reply #23 on: March 21, 2023, 06:29:04 AM »
Hi riversr54,

Kindly, could you post here your final executable?