
08-01-2001, 06:07 AM
|
|
Gunslinger
|
 |
Join Date: Mar 2001
Location: San Francisco, CA
Posts: 3,609
|
|
UPDATE!
Travis Rosenbaum (ZenZagg), the coder of Aneurism, e-mailed me and a few other people from the Graal community recently. He had this to say, please read it
Quote:
Hello, I am writing to you in regard to a program I wrote for use with Graal (which really was never intended to be distributed, but since it has been, I guess I'll clear up a few things):
1. I looked at a Google cache of the "Trojan Report" article
(http://www.google.com/search?q=cache...lnet.net/+aneu) and was about to get very angry about someone making unfounded claims about my software.
2. I saw that "Mold" had been very resourceful in hex editing my code and finding what appeared to be part of some Trojan code (http://police.nexose.net/ane-hex.GIF) I noted that someone said the 'email address was encrypted so cant find out whose email it is' well, that's because there IS NO EMAIL ADDRESS, AND NOTHING TO SEND.
I looked at the code in the screenshot, and wondered a bit...how could that code have gotten into my program...? And then it hit me--I reopened the Visual Basic (programming language) project and I noticed that I had used something called FuncBin.bas I obtained off of a open source programming site. I only wanted the functions in the file that allowed you to send text
to the Graal window, but it turns out this file was originally written
for AOL programs, (at the time I thought nothing of this, because I had no use for those extra functions and wrote this program just for my sole use)
Well, I looked into the file, and there were literally hundreds of
AOL-related functions which also included functions that used the text in that screenshot to fool people into giving them their passwords. After researching this for a while, I noticed a comment in the file which said the functions were dated back to 1997 (Like, AOL 2.5 days) and pretty much was useless today anyway. I never used any of these AOL functions in the working
code of my program, I am surprised that they are even there, and
inflamed that my name is plastered on something one could suspect as a Trojan. IT DOES NOTHING BUT WHAT IS INTENDED, I WOULD LIKE TO SEE EVEN ONE CASE WHERE MY PROGRAM HAS HARMED ANYONE OR PERFORMED ANY OF THE THINGS PEOPLE ARE
ACCUSING IT OF DOING. I DONT EVEN USE AOL!
I have always been dedicated to making quality software and would never try to take advantage of my users; if need be, I will release a new version of
Aneurism with all that extra crap removed from the source code (its only taking up space anyway). Next time I give out a program, I'll make sure I know what's in the whole file before doing so. Please, next time you attempt to label a program as a Trojan, at least contact the author first? I AGAIN REPEAT, THE FUNCTIONS THAT YOU SEE IN THE HEX EDITOR ARE DORMANT AND THE FILE THEY COME FROM IS OUT OF DATE BY AT LEAST 4 YEARS, WERE NOT CREATED BY ME, AND ARE NOT USED BY THE PROGRAM. I would like feedback on this issue so that if need be, I will release a new version with the SendText routines programmed in by hand (I've since learned windows API, so I dont need third-party source code anymore). I assure the community that this program is not a trojan, nor is it capable of acting as such. PLEASE SPREAD THIS INFORMATION.
I would like to have some means of dispelling this rumor, and I am
sending carbon copies of this email to other members of the Graal community, replies are encouraged. I tried posting on the Graal Communications Board, but I have to have a pay account, and I can't do that right now.
Sincerely,
Travis Rosenbaum (ZenZagg)
AIM: ZenZagg
ICQ: 10028033
P.S. If you have any more comments/questions, please don't hesitate to
ask.
|
|
__________________
|
Last edited by Zulithe; 08-01-2001 at 06:12 AM..
|
|
|