Re: Opinions on the best EXE compressor
From: Lluis Olle (llob.correobasurano_at_menta.net)
Date: 06/15/04
- Next message: John W.: "Re: ANN: Save 75% on StreamSec Tools 2.1"
- Previous message: Thomas G. Grubb: "Re: Runtime Property Editor? (NOT full Object Inspector)"
- In reply to: Tim Sullivan: "Re: Opinions on the best EXE compressor"
- Next in thread: Viatcheslav V. Vassiliev: "Re: Opinions on the best EXE compressor"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Tue, 15 Jun 2004 21:55:09 +0200
Oh .. yes, of course, I always assume that there is an AV component
monitoring the activity ... with out such AV monitoring, Windows will load
on demand the exe pages.
But I'm pretty sure that most - if not all - of the AV software scans all
the exe file, from first byte to last byte, before it begins it's execution.
My point of view is that everyone must know the pros and cons of using a
compressor ... never try to compress Word or Excel, for example, nor a DLL
file.
Regards
"Tim Sullivan" <tim@NO.SPAM.uil.FOR.ME.net> escribió en el mensaje
news:40cf42dd@newsgroups.borland.com...
> > 2. In my organization, the "realtime" Anti-Virus software is always on,
> and
> > "watching" ... so your mean that the Anti-Virus software doesn't brings
> ALL
> > exe code into memory to scan it's contents before real execution begins
?
> [...]
> > 4. A compressed program woul load faster from network.
>
> I cannot comment on your other points, but for sure point 4 is incorrect.
> Windows doesn't need to load the entire EXE or DLL into memory. As such,
> with a compressed EXE, you need to 1) load the exe off the network drive;
2)
> decompress it into memory; 3) execute. With a non-compressed EXE, the
header
> is loaded, and then Windows can intelligently pull the pieces that it
> requires as they are required.
>
> I also suspect that realtime AV products are scanning executable code as
its
> loaded, and don't force the entire EXE to be loaded at startup, but I
could
> wrong. Wouldn't be the first time.
>
> --
> Tim Sullivan
> Unlimited Intelligence Limited
> http://www.uil.net
>
>
- Next message: John W.: "Re: ANN: Save 75% on StreamSec Tools 2.1"
- Previous message: Thomas G. Grubb: "Re: Runtime Property Editor? (NOT full Object Inspector)"
- In reply to: Tim Sullivan: "Re: Opinions on the best EXE compressor"
- Next in thread: Viatcheslav V. Vassiliev: "Re: Opinions on the best EXE compressor"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|