How BugHunter Works; for those interested.

[Dustin Cook]

4Q <paul_zest@hushmail.com> wrote in
news:1186432550.052441.313480@b79g2000hse.googlegr oups.com:

> C J. wrote:
>> I know exactly how BUGHUNTER works... just fine.
>

> Okay idiot let's have it, blow by blow
> technical analysis "exactly how BUG****
> works..."

flunkyQ, You've been telling us what a lousy programmer I am, and how you
are so much better than myself. If that's the case, you should already
know in very technical detail how it works; including how the numbers are
generated. You shouldn't need my help, the source code, samples of the
source code, nor anyone elses help in getting this information. The
executable is freely available for your inspection as well as everyone
elses. I don't see the problem here. Either you can do it, or you can't.

> I'm going to get one of my research buddies to help me with the
> mathematical proof, just so we can verify your findings. We'll give you

You don't need to get anyone to help you with anything if your as good as
you'd like us to believe. You have the skillset to disassemble and
analyze it yourself. I personally, don't think you can, but I won't try
to dispute it any further than I already have. I've told you how it flags
files, and essentially repeated what the documentation mentioned from day
one, crc generation, not string scanning is how it works. It's been that
way since day 1. Where you got the silly notion of string scanner is
beyond me.

> I'm Ready, you can start sending the
> information over now!

For once in your sorry life, I think you should do your own homework.

--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - v2.2c
email: bughunter.dustin@gmail.com.removethis
web..: http://bughunter.it-mate.co.uk
Pad..: http://bughunter.it-mate.co.uk/pad.xml

[Kat Mandu]

Mail Man Bob wrote:
> I'm wondering... what the f*** are you doing wasting time posting this crap?
>
> "4Q" <paul_zest@hushmail.com> wrote in message
> news:1186460255.621423.153420@g4g2000hsf.googlegro ups.com...
>> Kak Manpoop wrote:
>>> 4Q wrote:
>>>> Dustbin Cook wrote:
>>>>
>>>> <snip>
>>>>
>>>> "...it gets two 32bit numbers in a specific order."
>>>>
>>>> Q:
>>>>
>>>> Excuse me dickhead, what does the above
>>>> mean. Can you explain what you wrote
>>>> in a more precise technical form and
>>>> not like some toothpaste marketing
>>>> bull****?
>>>>
>>>> Thank you in advance.
>>>>
>>>> ;]]
>>>> 4Q
>>>>
>>> Can you explain what you wrote
>>> in a more precise technical form and
>>> not like some toothpaste marketing
>>> bull****?
>> Sorry I didn't reply much early, I have
>> only just recovered from laughing myself
>> to near death! That repeat what the
>> other guy says gag is such top
>> entertainment. But alas I have now fully
>> recovered from the bellyache laughs and
>> Dustbin's psuedo technobabble doesn't
>> appear to be any clearer.
>>
>> "...it gets two 32bit numbers in a
>> specific order." It sort of sounds
>> a bit technical, *I'm sure most computer
>> illiterate saps would be happy to hand
>> over money for such an enlightening
>> description. Well you know what they
>> say about a fool and his money.*
>>
>> Just because you come from 'alt.freeware'
>> newsgroup doesn't mean you should
>> automatically suspend critical thinking
>> when it comes to so called technical
>> descriptions.
>>
>>
>> 4Q
>> http://fourq.host.sk
>>
>
>

He seems to be inexplicably concerned about "illiterate saps" handing
over money for a (to him, inscrutable) description of some aspect of a
freeware app, but has not said *who* is asking for money for such a
description, AFAICT . . .

[4Q]

Dustin Cook wrote:
> 4Q <paul_zest@hushmail.com> wrote in
> news:1186432550.052441.313480@b79g2000hse.googlegr oups.com:
>
> > C J. wrote:
> >> I know exactly how BUGHUNTER works... just fine.
> >
>
> > Okay idiot let's have it, blow by blow
> > technical analysis "exactly how BUG****
> > works..."
>
> flunkyQ, You've been telling us what a lousy programmer I am,

Let me quote this little contribution
25th Feb 2007, from someone willing to
give your code a professional appraisal.

<quote>
"I have often witnessed Dustfart bragging
about his "1337 skillz" in coding. I
almost had a fit from laughing at the
tripe up there. If he were an employee of
mine and showed as much unworthy pride
in his awful scribblings as he has
displayed on usenet, I'd fire his ****ing
arse, on the spot, and no two ways about
it"
</quote>


I've never had an employer say anything
like the above about my work, quite the
contrary infact, I've got plenty of good
references and testimonials.

Btw, I didn't appreciate you sending
me unsolicited email of your "How
Bug**** works" marketing crappola.
Next time ask permission before you send
technobabble spam to my inbox.


4Q
http://fourq.host.sk

[pcbutts1]

You don't remove the legit dll file you delete the bad reference to it from
the registry.


--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell



"Dustin Cook" <spamfilterineffect.see.sig@nowhere.com> wrote in message
news:Xns99855C8CB63B5HHI2948AJD832@69.28.186.121.. .
> "pcbutts1" <pcbutts1@leythosthestalker.com> wrote in
> news:f98oq4$77k$1@blackhelicopter.databasix.com:
>
>> The files are generated by the registry entries you idiot. Random
>> generated file names don't just appear out of nowhere. Those registry
>> entries can call various dll's, If a call is made incorrectly meaning
>> it calls a legit dll and the function it asks for, because it was
>> deleted, a General Protection Fault (BSOD) may occur.
>
> generated by the registry entries? WTF have you been smoking? I'm sure
> it's
> not pot.
>
> Why would I intentionally delete a legit dll? BugHunter does have false
> alarms I'm sure, but I usually correct those when I'm notified or when I
> discover them on my own.
>
> And aside from some very specific software, a BSOD will NOT usually occur.
>
>
>
>
> --
> Dustin Cook
> Author of BugHunter - MalWare Removal Tool - v2.2c
> email: bughunter.dustin@gmail.com.removethis
> web..: http://bughunter.it-mate.co.uk
> Pad..: http://bughunter.it-mate.co.uk/pad.xml
>

[Dustin Cook]

"pcbutts1" <pcbutts1@leythosthestalker.com> wrote in
news:f9au7u$a8q$1@blackhelicopter.databasix.com:

> You don't remove the legit dll file you delete the bad reference to it
> from the registry.

PcButts, please provide an example with a registry key so that I'll know
what your talking about. ok?


--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - v2.2c
email: bughunter.dustin@gmail.com.removethis
web..: http://bughunter.it-mate.co.uk
Pad..: http://bughunter.it-mate.co.uk/pad.xml

[4Q]

Dustin Cook wrote:
> "pcbutts1" <pcbutts1@leythosthestalker.com> wrote in
> news:f9au7u$a8q$1@blackhelicopter.databasix.com:
>
> > You don't remove the legit dll file you delete the bad reference to it
> > from the registry.
>
> PcButts, please provide an example with a registry key so that I'll know
> what your talking about. ok?
>

**** off Dust****, why should PCButts
provide you with anything? Just be
glad he told you Jomama has crawled
back under a rock after seeing Chris in
court. ;]]


4Q

[kurt wismer]

Dustin Cook wrote:
> kurt wismer <kurtw@sympatico.ca> wrote in news:f99lcd$d94$2@aioe.org:
>> Dustin Cook wrote:
>> [snip]
>>> Which capabilities is it either of you seem to think BugHunter is
>>> missing? aside from resident protection... It scans, it can rename,
>>> it can delete, it can be told to do nothing but scan. What feature(s)
>>> am I not including that everyone else is then?
>> there are all sorts of more generic detection techniques out there
>> that you don't try to implement but more commercial products do - but
>> as i said, those products have a lot more time/effort/money behind
>> them...
>
> Hueristics etc? No, I don't implement them. Many of the generic detection
> methods that worked great for viruses don't work so well for trojans.

i know, i wasn't thinking of generic *virus* detection techniques, just
generic techniques...

> Behavior blocking etc works for everything, but that would require
> BugHunter to remain resident, and it's really not designed for that.
> I certainly do understand your point. Thanks for speaking up.

there are other generic techniques that wouldn't necessarily require
residency... cross-view diffs, for example, or change detection
(especially for those areas involved in startup)...

i've also seen some generic manual malware removal instructions on the
net which say things like look in process explorer/autoruns for things
that don't have a publisher - probably qualifies as a heuristic, actually...

and of course it's easy enough to use a whitelist in a non-resident
manner and say if it's not on the whitelist then it's suspicious and the
user might want to investigate it further or send it in for analysis...
not sure that qualifies as generic, however...

--
"it's not the right time to be sober
now the idiots have taken over
spreading like a social cancer,
is there an answer?"

[Dustin Cook]

4Q <paul_zest@hushmail.com> wrote in news:1186537079.924114.286930
@l70g2000hse.googlegroups.com:

> Dustin Cook wrote:
>> "pcbutts1" <pcbutts1@leythosthestalker.com> wrote in
>> news:f9au7u$a8q$1@blackhelicopter.databasix.com:
>>
>> > You don't remove the legit dll file you delete the bad reference to
it
>> > from the registry.
>>
>> PcButts, please provide an example with a registry key so that I'll
know
>> what your talking about. ok?
>>
>
> **** off Dust****, why should PCButts
> provide you with anything? Just be
> glad he told you Jomama has crawled
> back under a rock after seeing Chris in
> court. ;]]

FlunkyQ, PcButts *is* Chris. The question, heh, for what it's worth is
rhetorical in nature. Re-read the lines of his quoted, and the question
again, and it might sink in.

PcButts has absolutely *no* credibility, none whatsoever. Your
*desperate* trolling hasn't gone unnoticed. Sticking up for PcButts,
attempted thread hijacking to artificially inflate your bug**** keyword
attack (your not as bright as you claim you are), and continued efforts
to cross-post into auk. Various other people have caught onto your game
and killfiled you, and some have been vocal about this fact. Your
audience is turning on you. They see you for what you are, a waste of
time.

I've said all I'm going to say in this thread to you, sir. Most of your
posts are trolling and/or flame bait anyway and don't have anything to do
with the topic; which is, how BugHunter works for those interested.


Good day Flunky, one day maybe you'll even grow up.

--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - v2.2c
email: bughunter.dustin@gmail.com.removethis
web..: http://bughunter.it-mate.co.uk
Pad..: http://bughunter.it-mate.co.uk/pad.xml

[4Q]

Dustfart Cook wrote:
> 4Q <paul_zest@hushmail.com> wrote in news:1186537079.924114.286930
> @l70g2000hse.googlegroups.com:
>
> > Dustin Cook wrote:
> >> "pcbutts1" <pcbutts1@leythosthestalker.com> wrote in
> >> news:f9au7u$a8q$1@blackhelicopter.databasix.com:
> >>
> >> > You don't remove the legit dll file you delete the bad reference to
> it
> >> > from the registry.
> >>
> >> PcButts, please provide an example with a registry key so that I'll
> know
> >> what your talking about. ok?
> >>
> >
> > **** off Dust****, why should PCButts
> > provide you with anything? Just be
> > glad he told you Jomama has crawled
> > back under a rock after seeing Chris in
> > court. ;]]
>
> FlunkyQ, PcButts *is* Chris.

Prove it.

> The question, heh, for what it's worth is
> rhetorical in nature. Re-read the lines of his quoted, and the question
> again, and it might sink in.
>

The answer for what it's worth was
sarcastic in nature. Re-read the lines
of my quote and the message again,
and it might sink in. Actually you are
too thick for anything to sink in so
forget it.



> PcButts has absolutely *no* credibility, none whatsoever. Your

Dustin Cook has absolutely "*no*"
credibility, none whatsoever. None!


> *desperate* trolling hasn't gone unnoticed. Sticking up for PcButts,

Really, I thought it had slipped right
under the radar. Was the fact I actually
said I was "trolling" you a little clue
for you?


> attempted thread hijacking to artificially inflate your bug**** keyword
Says you the numpty that starts a thread
stating "How Bug**** Works" then can't
answer any questions about Bug****.


> attack (your not as bright as you claim you are), and continued efforts
> to cross-post into auk. Various other

You are not as bright as *you* claim Mr.
180 IQ with your super soldering iron
and circuit board dust blowing skills.


> people have caught onto your game
> and killfiled you, and some have been vocal about this fact. Your
> audience is turning on you. They see you for what you are, a waste of
> time.
>

People have been telling you your a thick
headed kook for a long time, is any of
that sinking in yet? Do your
alt.freeware know you are a certified
netl0on kook? Maybe they should Google
on "Kook"+"Dustin" and get wise.


> I've said all I'm going to say in this thread to you, sir.

Go on prove yourself wrong again, Dust****. How many ****ing times
have you
said this is your final word? Get them
tap dancing shoes back on again.


>Most of your
> posts are trolling and/or flame bait anyway and don't have anything to do
> with the topic; which is, how BugHunter works for those interested.
>

I think most people would have read my
comments about proprietary "algorithms"
and questions about your meaningless
marketing technobabble.


>
> Good day Flunky, one day maybe you'll even grow up.

You are the flunky Dustard, and maybe
when you stop calling your Harry Potter
wizard themed basement/bedroom a
"dungeon" then you can start making
remarks about growing up.


4Q

[4Q]

Dustfart Cook wrote:
> 4Q <paul_zest@hushmail.com> wrote in news:1186537079.924114.286930
> @l70g2000hse.googlegroups.com:
>
> > Dustin Cook wrote:
> >> "pcbutts1" <pcbutts1@leythosthestalker.com> wrote in
> >> news:f9au7u$a8q$1@blackhelicopter.databasix.com:
> >>
> >> > You don't remove the legit dll file you delete the bad reference to
> it
> >> > from the registry.
> >>
> >> PcButts, please provide an example with a registry key so that I'll
> know
> >> what your talking about. ok?
> >>
> >
> > **** off Dust****, why should PCButts
> > provide you with anything? Just be
> > glad he told you Jomama has crawled
> > back under a rock after seeing Chris in
> > court. ;]]
>
> FlunkyQ, PcButts *is* Chris.

Prove it. Why don't you get Jomama Lamo
come into this thread are give you some
backup, you need it.

> The question, heh, for what it's worth is
> rhetorical in nature. Re-read the lines of his quoted, and the question
> again, and it might sink in.
>

The answer for what it's worth was
sarcastic in nature. Re-read the lines
of my quote and the message again,
and it might sink in. Actually you are
too thick for anything to sink in so
forget it.



> PcButts has absolutely *no* credibility, none whatsoever. Your

Dustin Cook has absolutely "*no*"
credibility, none whatsoever. None!


> *desperate* trolling hasn't gone unnoticed. Sticking up for PcButts,

Really, I thought it had slipped right
under the radar. Was the fact I actually
said I was "trolling" you a little clue
for you?


> attempted thread hijacking to artificially inflate your bug**** keyword

Says you the numpty that starts a thread
stating "How Bug**** Works" then can't
answer any questions about Bug****.


> attack (your not as bright as you claim you are), and continued efforts
> to cross-post into auk. Various other

You are not as bright as *you* claim Mr.
180 IQ with your super soldering iron
and circuit board dust blowing skills.


> people have caught onto your game
> and killfiled you, and some have been vocal about this fact. Your
> audience is turning on you. They see you for what you are, a waste of
> time.
>

People have been telling you you're a
thick headed kook for a long time, is any
of that sinking in yet? Do your
alt.freeware know you are a certified
netl0on kook? Maybe they should Google
on "Kook"+"Dustin" and get wise.


> I've said all I'm going to say in this thread to you, sir.

Go on prove yourself wrong again, Dust****. How many ****ing times
have you said this is your final word?
Get them tap dancing shoes back on again.

>Most of your
> posts are trolling and/or flame bait anyway and don't have anything to do
> with the topic; which is, how BugHunter works for those interested.
>

I think most people would have read my
comments about proprietary "algorithms"
and questions about your meaningless
marketing technobabble.


>
> Good day Flunky, one day maybe you'll even grow up.

You are the flunky Dustard, and maybe
when you stop calling your Harry Potter
wizard themed basement/bedroom a
"dungeon" then you can start making
remarks about growing up.


4Q