Tavis Ormandy on Twitter: "Comodo antivirus forwards emulated Win32 API calls to the real API during scans. ¯\_(ツ)

Country	Code	For customers of
United States	40404	(any)
Canada	21212	(any)
United Kingdom	86444	Vodafone, Orange, 3, O2
Brazil	40404	Nextel, TIM
Haiti	40404	Digicel, Voila
Ireland	51210	Vodafone, O2
India	53000	Bharti Airtel, Videocon, Reliance
Indonesia	89887	AXIS, 3, Telkomsel, Indosat, XL Axiata
Italy	4880804	Wind
3424486444	Vodafone
» See SMS short codes for other countries

1. 1 more reply
1. Billy O'Neal‏ @MalwareMinigun 22 Mar 2016
  Replying to @taviso
  
  . @taviso @JohnLaTwC You forgot "running as NT AUTHORITY\SYSTEM / S-1-5-18". That's the important bit.
  
  5 likes
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. Wojciech Pawlikowski‏ @wpawlikowski 23 Mar 2016
  Replying to @taviso
  
  @taviso @Marsmensch yo dawg I herd you like API so we put API into API, so you can call API while you emulate API
  
  2 likes
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. Diego Elio Pettenò‏ @flameeyes 22 Mar 2016
  Replying to @taviso
  
  @taviso WTF?
  
  2 likes
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. 1 more reply
1. Joxean Koret‏ @matalaz 22 Mar 2016
  Replying to @taviso
  
  @taviso nice bug
  
  1 like
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. Scott Jean Summers‏ @ScottJeanSummer 23 Mar 2016
  Replying to @taviso
  
  @taviso I appreciate what you are doing. Your digging is helping millions of people.
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. Mariusz B.‏ @mariuszbit 23 Mar 2016
  Replying to @taviso
  
  @taviso It is hard these days to write at least tiny bullet-proof emulator covering API nuances. Does it mean AV emulators are doomed?
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. Aaron Longchamps‏ @Aaron416 22 Mar 2016
  Replying to @taviso
  
  @taviso can't even make this stuff up
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. Dogs are Good.‏ @ohunt 22 Mar 2016
  Replying to @taviso
  
  @taviso next next next gen: turn off AV. :D
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. Dogs are Good.‏ @ohunt 22 Mar 2016
  Replying to @taviso
  
  @taviso next next gen: AV is also running in a vm.
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. Dogs are Good.‏ @ohunt 22 Mar 2016
  Replying to @taviso
  
  @taviso uhh. Next gen AV : run program in entire VM running host OS
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. Кириакос Экономоу‏ @kyREcon 22 Mar 2016
  Replying to @taviso
  
  @taviso awesome finding man :0)
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. Gil Dabah‏ @_arkon 22 Mar 2016
  Replying to @taviso
  
  @taviso this the classic: It's not a bug it's a feature!!! lol
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. David Qian‏ @jodoyodo 22 Mar 2016
  Replying to @taviso
  
  @taviso I'm a software engineer who knows little about computer security but your bug reports are so cool.
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. Adam Browning‏ @adbrowning1 22 Mar 2016
  Replying to @taviso
  
  @taviso That seems like a bad idea...
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo