Interview with an Adware author
2009-01-13 22:53:28.85475+00 by Dan Lyke 2 comments
Well worth a read: Sherri Davidoff interviews adware author Matt Knox, in which he talks about everything from how he started down the slippery slope, to, at a fairly high level, the sorts of exploits he used to keep his software from being uninstallable.
... Basically, the semantics of Create Remote Thread are: You’re a process, I’m a different process. I call you and say “Hey! I have this bit of code. I’d really like it if you’d run this.” You’d say, “Sure,” because you’re a Windows process– you’re all hippie-like and free love. Windows processes, by the way, are insanely promiscuous. ...