tested it with nortons - did'nt pick it up,
sme story with a lot of others
but mcafee's 2004 did... guess that says a lot about which ones are good and whcih ones arent :\

I found a program a while back to merge 2 exe files together so when u run one, it runs the other as well... anyone know what it is coz i cant find it again :S

That is call "binding" and there hundreds of programs to do that.
U can start with Stealthtools2.0.
But most AV's now pick it up easy so you gotta be smarter than them.

Cya
Wolfman

ok

I use stealthfiles 2.0 for this. This is good if you want to get some idiots, but really if you're trying to trick virus scanners get morphine, and pack/scramble the data. There are a few progs this doesn't work on. Then, you just kill the virus scanners.

Also i have just found that the binder on the trojan Beast 2.0 can bind files other than the trojan. I have the lates virus scan definitions for mcafee and it doesnt pick up anything. You can find beast at www.areyoufearless.com

Hint
Using WinRar3.0 (or later) you can Extract and run any file in TEMP.
So Creat a with a BathFile that runs all Files you want and Compress them as an Exe file (sfx format)

here's what i do. get YAB (yet another binder), and use a custom stub, which you can pack / hex / scramble.

then ur binded file will be undetected!

i use TheJoiner, but that's scanned by the most AV-Scanners...
i'd like to test "morphine", but where could i get it?
i have fould it with google, but i think it's for linux... i think it isn't the program that i had searched. so please could somebody tell me who i could download the right program?



$3b4$t!4N

use winrar to make a sfx archive,

you can bind,join some files with different extension into one exe, if you execute it, extract all file to a folder with in option of the sfx archive spezified option. you can make that after the extraction of the file a .bat file execute. to make a kit for you server, self-installation or other, is very nice, also undected by antivir. if the to exe files undetectable from antivir

Whole point is ppl willingly execute it thinking its sumthing else

Winrar dont help with that - best one ive found so far is Exebundle

I have used only few binders but YAB is very effective with custom stubs and Stealthtools aren't bad either... Only the archenemies(AV's) likes to detect binded files

Is Exebundle detected by AV?

hm, does nobody know a binder which is not detected by AV?

try
Fresh binder 2.1
just pack the Stub.exe and it will be undetected

ok thank you, must i change the stub.exe in the FreshBind-Directory with my trojan-file ?

what about "sena spy tool"?

hm ok, i tested FreshBinder!
it's a very good binder! but when i'm binding a trojan with a pic, i get an .exe - file.
does somebody know a binder, which binds a trojan with a pic to a .jpg - file?
i doesn't know whether this binder exists!

$3b4$t!4N

kasper detext freshbinder

Tick...tick...mother-(filtered)-tick...

Good things come to those who know.

i use GoboWrap

i write a Help file but its german!

kick

hm, i'm from germany so i hadn't problems with your tuturial, but my binded files are detected by AV!!!!