Posted 11 January 2005 - 07:38 PM
Well you want to add some code to the file that will kill the A/V right?
Okay, so we have our detected file, and we have our A/V killer code, we add it together. We send it to the computer but.... How are we going to open it? In order to kill the A/V you have to open the file, so that the A/V killer code is executed, but you cannot do that because it is attached to a file which is detected.
That method won't work, unless you sent an undetected A/V killer first than executed that.
Also aswell as file packers, file protectors can make files undetected some times.