2 small utilities for Spoon Studio

Discussion in 'Virtualization' started by a_catalin, May 20, 2011.

  1. johnmcloud

    johnmcloud MDL Junior Member

    Jul 10, 2011
    97
    6
    0
  2. johnmcloud

    johnmcloud MDL Junior Member

    Jul 10, 2011
    97
    6
    0
    At the first check, seems the same software.
    They change only the name? Some new template and no new feature.
     
  3. a_catalin

    a_catalin MDL Member

    Mar 4, 2011
    166
    66
    10
    I too can't see any differences :rolleyes:
    Anyway ExeBuilder seems to work fine with this version.
     
  4. johnmcloud

    johnmcloud MDL Junior Member

    Jul 10, 2011
    97
    6
    0
    catalin,
    Don't forget to add the function for edit the TAG of the .exe with ExeBuilder
    Thanks
     
  5. a_catalin

    a_catalin MDL Member

    Mar 4, 2011
    166
    66
    10
    Yes, I searched but seems that is not so easy to implement this + the modification of these informations is not "encouraged" because they are a part of the copyright for the original exe file. On any forum I tried to discuss this they were very "reticent" even after I explained the purpose of my program.

    By the way, since I implemented the feature to copy these informations, the false positive detections from antiviruses has multiplied by 2..3 times, especially for Microsoft Office exe files. It seems that there are lot of viruses that "mimic" these informations so the users will think that they are legitimate exe files.
    This is happening especially with "low quality" antiviruses which have not so good heuristic detection.
    One way to reduce this is to "digitally sign" the exe files created by ExeBuilder.
    Other way is to constantly report those files as false positives to antiviruses support but unfortunately doesn't always work. Not all the antiviruses support are "cooperative" or they change their heuristic detection only after many weeks.
     
  6. johnmcloud

    johnmcloud MDL Junior Member

    Jul 10, 2011
    97
    6
    0
  7. a_catalin

    a_catalin MDL Member

    Mar 4, 2011
    166
    66
    10
    #187 a_catalin, Jan 15, 2012
    Last edited: Jan 15, 2012
    (OP)
    I made one zip file from some exe files (31) from a few Microsoft Office virtualizations. When I scanned it at VirusTotal, more then 20 antiviruses (out of 43) showed "infected". From those names you can see clearly that the detection was made by "generic/heuristic" method not by the "signature" of the virus.
    I informed the antiviruses supports and now, after almost a month, there are only 6 out of 43.
    I never used MSE but also I've never heard that it shows false positives so often.
    Anyway there are many others who use those "low cost" antiviruses that I was talking about...
    I use Eset Nod32; one of the reasons is that it has a low rate of false positives :D

    Thank you for the links.
    But there are several problems:
    1. The one with openssl seems to work only on Linux, not Windows.
    2. You still need to buy a certificate, the one that openssl generates is not enough to authenticate a exe file for an antivirus. It's like you sign yourself a document that shows that you're trustworthy :D If this would of worked, many trojans would of had such certificates :rolleyes:
    And in my country these certificates costs much in relation to an average income.
    4. These methods are used to digitally sign an exe file MANUALLY, you can't use them to automatically digitally sign the exe files generated by ExeBuilder.
    5. Maybe some users will decide to modify these exe files (add/remove icons for example). But if you change only one byte, the certificate will no longer be valid.
     
  8. a_catalin

    a_catalin MDL Member

    Mar 4, 2011
    166
    66
    10
    This problem with antiviruses is generated in fact by the way antiviruses "treat" unknown exe files. If an exe file seems to be a virus, it must be one. It doesn't matter that it clearly (for a human being) does nothing wrong when you look at its code, to a limited program it could be a virus.
    Those "low cost" antiviruses obviously don't have good code for heuristic detection.
    The sad part is that most of the people who use those antiviruses don't know it and believe that they are really infected.

    On the other hand, after many searches and discussions on other forums, I don't think that the digitally signing can be included 100% into a program nor it is advisable to do it.
    Another way to solve this problem: to add the digital signature after the files were generated.
    If you virtualize a program and you want it distributed somehow to others you can digitally sign them with your signature.
     
  9. a_catalin

    a_catalin MDL Member

    Mar 4, 2011
    166
    66
    10
    You're welcome :)
     
  10. lram32

    lram32 MDL Novice

    May 4, 2011
    47
    29
    0
    #190 lram32, Jan 22, 2012
    Last edited: Jan 22, 2012
    a_catalin

    sorry I have a question.

    I do portable several programs
    but when I run the program portable
    It create a folder with the name SPOON in the directory %temp%
    my question is how I can to put this directory into the folder where the virtualized
    application is?

    within that folder (%TEMP%\SPOON) is another folder called "CACHE"
    (%TEMP%\SPOON\CACHE)



    the idea is that the program put all directories in the USB, or another portable device

    I downloaded several portables (virtualized with spoon studio) and they can do it

    can you help me please?.

    thanks.
     
  11. a_catalin

    a_catalin MDL Member

    Mar 4, 2011
    166
    66
    10
    #191 a_catalin, Jan 22, 2012
    Last edited: Jan 22, 2012
    (OP)
    Any virtualized application has one or two special folders used for two things:
    1. to register changes made to files, folders and registry entries inside the virtual environment.
    2. to cache some startup files like exe, dlls and fonts.

    The other virtualization applications (like Cameyo or Thinapp) and older versions of Spoon Studio (<= 9.3 I think) use only one folder for this.

    In the current version of Spoon Studio:
    The first folder can be set at Settings >> Process Configuration >> Application sandbox location. You can use @APPDIR@ instead of @APPDATALOCAL@ so the first folder to be created and used in the same folder where the virtualized application is. For example you can set "@APPDIR@\[Name_of_the_application]Files".
    The second folder is that %TEMP%\SPOON\CACHE which you mentioned. You can't change its location.
    Why Spoon Studio implements this second folder in the virtualized application?
    Well, if you start the virtualized application on a fast storage device (like the HDD where the OS of the computer is) you will not see much of a difference.
    But if you start it from a slow storage device (like a USB key/stick) you'll see a huge difference.
    For example on my USB key/stick Office 2007 at the first start is 13(!) times faster than the one made with Thinapp or older versions of Spoon Studio. At the next starts is 2..3 times faster. And after starting seems also to be faster when you use it to create/modify documents.
    Why is that? The answer is obvious: because the %TEMP%\SPOON\CACHE folder on the HDD is much faster in handling files/folders than a USB key/stick is.
    On the other hand you know that USB keys/sticks does have a limited number of writings operations. So it's wise to lower the number of writing operations made by the virtualized application on the USB keys/sticks.

    As you can see it's not wise to move this folder into the virtualized application's location.
    On the other hand there are only some cached startup files in it, not files with sensitive informations...
    As an alternative, so you can decrease its "size", you can try to activate Settings >> Process Configuration >> Enable startup executable optimization. This way it will not cache so many files. But this doesn't work with any application.
     
  12. lram32

    lram32 MDL Novice

    May 4, 2011
    47
    29
    0
    @ a_catalin

    ok first thanks for take time to answer.

    I asked because I observed that some portables don't create a folder in the machine (folder %temp%), may be the reason is the version of spoon studio, as you said.

    is true is better optimized the use of portable application, but the problem is that not delete that folder and store too many files.

    I will try to enable startup executable optimization maybe this will be useful in the aplications portables (I have a lot :D).

    thanks a lot. :)
     
  13. a_catalin

    a_catalin MDL Member

    Mar 4, 2011
    166
    66
    10
    You're welcome.
    It's not deleting the folder so it could start the virtualized application faster next time you use it again (it would not write again most of those files).
    On my computer I use a few virtualized applications every day and everyone of them is using such a folder. But since they are in the temp folder and any virtualization application would of make them cache those files anyway (sandbox or temp folder), it doesn't bother me that much.
    But if you still think that it should be removed, you could submit a feature request to Spoon.net
     
  14. lram32

    lram32 MDL Novice

    May 4, 2011
    47
    29
    0
    #194 lram32, Jan 22, 2012
    Last edited by a moderator: Jan 23, 2012
    news!!!!

    new patch out for spoon studio 10.0.2010.0
    by Lz0


    no problem with the folder %temp% the problem maybe in the future will be
    a lot of temp files. thanks. :)
     
  15. a_catalin

    a_catalin MDL Member

    Mar 4, 2011
    166
    66
    10
    I've never virtualized an application with html files as Help.
    Which application is it, so I can try..?
    And when this application is installed normally is using exactly the same links to load the html files?
    If so, perhaps the browser can't "see" well the virtualized filesystem...
     
  16. a_catalin

    a_catalin MDL Member

    Mar 4, 2011
    166
    66
    10
    A solution would be to integrate a small web browser that will load those html files...
     
  17. Armagedom

    Armagedom MDL Novice

    Mar 16, 2012
    6
    0
    0
    Hi a_catalin,

    I have virtualized AutoCAD 2011 and 2012 x86 using Spoon Virtual Application Studio 2012. However, despite all apparently went well, a window licence error is open and the application does not work. What happens is that I have tested virtualized applications on virtual machines and work without showing any error but when I run the portable apps on my work PC, displays a license error message.

    What I want to ask is, why does this error pops up?

    Thanks for your patience.:biggrin:
     
  18. a_catalin

    a_catalin MDL Member

    Mar 4, 2011
    166
    66
    10
    A question: when you virtualized AutoCAD, have you used that virtual machine (on which is starting well)?