metrox
hi, at first my english is bad. smile.gif

k, i have a problem, most of the good programs are detectable from anti-virus-progs. i know, that i change everthing on the file, version, image and packet with upx, but thats not enough, can anybody help me wiht furthermore information about this topic. i am very happy for your answer. exescope,ressourcehacker,hexeditor, i have all change, but hexeditor i dont know what i musst change.


metrox
ScriptGod
every good antvirus programm check signatures in the file. these siganture is not the complete file only "the" bad/unique part(s) in the moste cases. so you cannot not trick an antivirus program by changing some bytes... there is now way to do that. you can only write a programm by yourself wich does the same as the programm but with a little differnts like other buffer sizes etc.
metrox
k thanks, that is a answer smile.gif
GhostCow
can you give an example for us non-coders how one changes buffer sizes?
MAeStRo
do u mean we have to add some bytes to the trojan?
i think this way is no effective one
cus i'd tested this one and the answer was negative
sad.gif
matiano
change EPO (entry point) is good for KAV
absolution
How would you go about changing the buffer or entry point?
MAeStRo
tnkx so much bro matiano
i'll try to change EPO
smile.gif
tibbar
i can always beat Norton with a simply hexing and packing...that AV program is absolutely useless - especially when u consider about 60% of people rely on it.
Faceless Master
hmm
Well I coded a tool in VB.I named it ByPass.
It can make any trojan undetected for any AV but after it making your torjan Undetected your trojan will need VB Runtimes.(Msvbvm60.dll)
Well if you want you can mail me @
facelessmaster@linuxmail.org
...
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.