Click here to Skip to main content
15,889,992 members

Welcome to the Lounge

   

For discussing anything related to a software developer's life but is not for programming questions. Got a programming question?

The Lounge is rated Safe For Work. If you're about to post something inappropriate for a shared office environment, then don't post it. No ads, no abuse, and no programming questions. Trolling, (political, climate, religious or whatever) will result in your account being removed.

 
GeneralObscure paths to serious bugs Pin
Chris Maunder10-Aug-21 11:14
cofounderChris Maunder10-Aug-21 11:14 
GeneralRe: Obscure paths to serious bugs PinPopular
Matthew Dennis10-Aug-21 11:20
sysadminMatthew Dennis10-Aug-21 11:20 
GeneralRe: Obscure paths to serious bugs Pin
Andre_Prellwitz11-Aug-21 4:14
Andre_Prellwitz11-Aug-21 4:14 
GeneralRe: Obscure paths to serious bugs Pin
Greg Utas11-Aug-21 6:35
professionalGreg Utas11-Aug-21 6:35 
GeneralRe: Obscure paths to serious bugs Pin
PIEBALDconsult10-Aug-21 11:28
mvePIEBALDconsult10-Aug-21 11:28 
GeneralRe: Obscure paths to serious bugs Pin
charlieg11-Aug-21 7:59
charlieg11-Aug-21 7:59 
GeneralRe: Obscure paths to serious bugs Pin
User 991608010-Aug-21 11:32
professionalUser 991608010-Aug-21 11:32 
GeneralRe: Obscure paths to serious bugs Pin
Alois Kraus10-Aug-21 11:39
Alois Kraus10-Aug-21 11:39 
I have received a perf issue that a machine was unusable due to a schtasks.exe consuming all CPU. When looking at the MiniDump I did only see garbage stack traces. Ok send me a full dump but the stacks were still ending in heap allocated memory which is strange for a process not having dynamic code generation.
When checking which code the many threads did execute I found highly optimized AVX2 assembly and unusal assembly instructions such as aesenc and related. These instructions are only known to guys creating cryptographic algos with the Intel AES-NI instructions to speed up AES encryption.

After counting the possibilities I did suspect that a Trojan was just encrypting that machine.
That turned from a perf issue to a really serious problem.
With Windbg and the mex extension I could save the exe to disk which my AV Scanner would after a few seconds delete because it has detected malicious software. This helped to find out what it actually was. In this case it was a Monero miner.

Ok it was not encrypting the disk but still a bad issue which needs to some cleaning of that machine.

My colleagues still ask me to write a book about such stuff.
GeneralRe: Obscure paths to serious bugs Pin
theoldfool10-Aug-21 12:13
professionaltheoldfool10-Aug-21 12:13 
GeneralRe: Obscure paths to serious bugs Pin
englebart10-Aug-21 14:10
professionalenglebart10-Aug-21 14:10 
GeneralRe: Obscure paths to serious bugs Pin
Ron Anders10-Aug-21 15:22
Ron Anders10-Aug-21 15:22 
GeneralRe: Obscure paths to serious bugs Pin
Duncan Edwards Jones10-Aug-21 22:31
professionalDuncan Edwards Jones10-Aug-21 22:31 
GeneralRe: Obscure paths to serious bugs Pin
Member 916705710-Aug-21 23:14
Member 916705710-Aug-21 23:14 
GeneralRe: Obscure paths to serious bugs Pin
Slow Eddie11-Aug-21 2:04
professionalSlow Eddie11-Aug-21 2:04 
GeneralRe: Obscure paths to serious bugs Pin
Ed Attfield11-Aug-21 3:06
Ed Attfield11-Aug-21 3:06 
GeneralRe: Obscure paths to serious bugs Pin
MarkTJohnson11-Aug-21 2:40
professionalMarkTJohnson11-Aug-21 2:40 
GeneralRe: Obscure paths to serious bugs Pin
Rich Shealer11-Aug-21 3:06
Rich Shealer11-Aug-21 3:06 
GeneralRe: Obscure paths to serious bugs Pin
davecasdf11-Aug-21 3:06
davecasdf11-Aug-21 3:06 
GeneralRe: Obscure paths to serious bugs Pin
obermd11-Aug-21 3:20
obermd11-Aug-21 3:20 
GeneralRe: Obscure paths to serious bugs Pin
MarkTJohnson11-Aug-21 4:37
professionalMarkTJohnson11-Aug-21 4:37 
GeneralRe: Obscure paths to serious bugs Pin
Matthew Dennis11-Aug-21 7:07
sysadminMatthew Dennis11-Aug-21 7:07 
GeneralThought of the Day Pin
OriginalGriff10-Aug-21 4:30
mveOriginalGriff10-Aug-21 4:30 
GeneralRe: Thought of the Day Pin
obermd10-Aug-21 4:33
obermd10-Aug-21 4:33 
GeneralRe: Thought of the Day Pin
AndyChisholm11-Aug-21 5:16
AndyChisholm11-Aug-21 5:16 
GeneralRe: Thought of the Day Pin
Mike Hankey10-Aug-21 4:40
mveMike Hankey10-Aug-21 4:40 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.