Articles by Robert Poston

How large is a piece of Malware?

How large is a piece of Malware?

Q. What is the average size of a typical malware file? Of course there is no definitive answer to this question, and different kinds of malware can have vastly different sizes, but for those wanting an answer I ran a Read more…

Stick and stones may break my bones but words will pass through me undetected?

Image (2) sticksandstones2.png for post 24773

The big scare story of this week is based on recent research demonstrating a technique to write shellcode that resembles English text. Some bright spark naively suggested that this will make the shellcode almost impossible for anti-virus scanners to detect. Read more…

Does the W32/Induc-A Delphi virus infection only happen to other people?

Image (1) jaywalking.jpg for post 20027

Every day, on my walk to work through downtown Vancouver, I pass a poster for a road safety campaign. It says "Being hit while jaywalking only happens to other people..." As someone who originates from England, where jaywalking is normal Read more…

A Long Shortcut

A Long Shortcut

Drivng to family for Christmas, some of you may have tried taking a shortcut to avoid traffic queues. Sometimes those "shortcuts" can end up longer than the original route, but hopefully they did not get you into as much trouble Read more…

The Code is dead. Long live the Code!

Default image

Three years ago internet banking Trojans, along with their associated downloader Trojans, began to proliferate: samples started flooding in by the thousands. The poor way to deal with these would be to wait for them to come in then issue thousands of specific Read more…

Almost what I expected...

Default image

During some time off this week I booked the flights for my summer vacation. Checking for my confirmation email (using a personal email account not protected by Sophos's PureMessage) I found not one but two emails about my purchase. One Read more…

Quality versus Quantity

Default image

A certain blockbuster movie would have us believe that, at the ancient battle of Thermopylae, 300 Spartans managed to hold off over 1 million Persians. Not quite the whole story, but it made for a good evening's entertainment. Meanwhile, how Read more…

Never a DuLL Day

Default image

It was a busy morning, for a weekend, but nothing out of the ordinary. In the afternoon a new variant of the Dlena family of proxy Trojans came in. It seems the author thought he would try a new trick. Troj/Dlena-B has Read more…