[rageinc]

Simply put, i have the best way to get around virus scanner detection. It is a program called ExeStealth. It is designed to protect your program against it being cracked, but it works great to change the way a .exe file looks. It also has a special option to make ur own key or somthin i havent used this option much. If u cant find it tell me and ill post it on some server somewhere. Peace. ;)

[Lie8]

matiano, on Feb 10 2005, 05:16 PM, said:

Lie8, on Feb 9 2005, 05:34 PM, said:

@matiano,

pmed u twice ... can u pls PM me the top secret link of urs or add me in MSN .... thnx inadvance.

<{POST_SNAPBACK}>

sorry i dont trust u because u have only 2 postings :)

<{POST_SNAPBACK}>

hmm .. bro PMed you .. pls reply this time ;)

@rageinc,

from what ur telling i can understand it's something like PCGuard ... i already tried PC guard .... but can't get it working, it corrupts already packed servers .... i'll try this today .... ;)

[Lie8]

@rageinc,

tried the exestealth 2,75a .... but didn't work .... may be there is something speacial settings .. will pls mention them?

[archphase]

http://metawire.org/~archphaz/pib.zip

[crafty]

PC Guard For Win32 Mini Tut - Makes Unpacked/Packed EXE Undetectable

Open PC Guard

Next To Application Signature click Browse

Select your .exe

Click GENERAL under the PROTECTION OPTIONS tab

UNCHECK Show Warning Messages
CHECK Enable anti-dumping protection
CHECK Virtual Machine Detection

Click CUSTOMIZATION

UNCHECK ALL TICKS

Under PROTECTION METHODS tab Click PLAIN

CLICK PROTECT

** DONE **

upload to virustotal.com to check if undetectable...

[crafty]

PC Guard is now detected the following:
Antivirus Version Update Result
AntiVir 6.29.0.11 02.11.2005 no virus found
AVG 718 02.10.2005 no virus found
BitDefender 7.0 02.13.2005 no virus found
ClamAV devel-20050130 02.14.2005 Trojan.Downloader.Delf-49
DrWeb 4.32b 02.14.2005 Trojan.DownLoader.393
eTrust-Iris 7.1.194.0 02.13.2005 no virus found
eTrust-Vet 11.7.0.0 02.14.2005 no virus found
Fortinet 2.51 02.12.2005 no virus found
F-Prot 3.16a 02.10.2005 no virus found
Kaspersky 4.0.2.24 02.14.2005 no virus found
NOD32v2 1.998 02.12.2005 no virus found
Norman 5.70.10 02.11.2005 no virus found
Panda 8.02.00 02.13.2005 no virus found
Sybari 7.5.1314 02.13.2005 Downloader-PP
Symantec 8.0 02.13.2005 no virus found

Archphases program (pib) is also detected as shown below

Antivirus Version Update Result
AntiVir 6.29.0.11 02.11.2005 no virus found
AVG 718 02.10.2005 no virus found
BitDefender 7.0 02.13.2005 BehavesLike:Trojan.Downloader
ClamAV devel-20050130 02.14.2005 no virus found
DrWeb 4.32b 02.14.2005 no virus found
eTrust-Iris 7.1.194.0 02.13.2005 no virus found
eTrust-Vet 11.7.0.0 02.14.2005 no virus found
Fortinet 2.51 02.12.2005 no virus found
F-Prot 3.16a 02.10.2005 could be infected with an unknown virus
Kaspersky 4.0.2.24 02.14.2005 no virus found
NOD32v2 1.998 02.12.2005 probably unknown CRYPT.WIN32 virus
Norman 5.70.10 02.11.2005 no virus found
Panda 8.02.00 02.13.2005 no virus found
Sybari 7.5.1314 02.13.2005 no virus found
Symantec 8.0 02.13.2005 no virus found

in conclusion i have not found a program which can make undetectable files as yet but will keep looking :P

[Lie8]

@crafty,

thnx for the tut .... but could u pls give some info for v4 .... v5 is still unregged and so it shows demo limitations while executed .... also, will it corrupt and already packed server?


@archphase,

can't connect to site .... but eager to test the app.


@rageinc,

waiting if u have any good suggestions in ur sleeves for Exestealth 2.75

[crafty]

ok it didn't take me long as i have found a new method to get past 99.9% of AV
only Sybari version 7.5.1314 can detect a virus/trojan/downloader

so yes it is still possible, just keep trying people.

any questions PM me

if you are working for or with any government or antipiracy or antivirus company DO NOT PM ME

[Lie8]

hmm ... any link for the "archphase" 's pid ? want to check it.

pcguard32 .... really bugs with the annoying demo messge .... and still didn't manage to do da job with v4.06

looks like i'll have to go back to AV devil/hex edit again ... but so hard :angry:

[archphase]

http://www.censoredn...ource%5Dpib.zip

censorednet goes down as well though, people are always playing packeting games, :(

[Lie8]

thnc arc .... i got it .... and matiano .... many man thnx

[toe]

i used the demo of pc guard 5 and it works fine mostly undetected. it works fine but u can only run it 20 times coz of the demo

[yuck_fou]

Any ideas where [Edited by GSecur: Do not even hint at warez request] ^_^ Or does anybody know any other software that is as good as PC Gurad?? I've trird a few but they seem to wreck the server.exe. :unsure:

[yuck_fou]

yuck_fou, on Jun 21 2005, 03:50 PM, said:

Any ideas where [Edited by GSecur:  Do not even hint at warez request] ^_^  Or does anybody know any other software that is as good as PC Gurad?? I've trird a few but they seem to wreck the server.exe.  :unsure:

<{POST_SNAPBACK}>

Ha ha ha sorry Gsecur! I thought i'd test to see how well the moderators work here! :)

But on another note...I guess nobody really lets on about which software will really do the trick because if they did the AV spys would catch on *click* :D

[ietians]

WEll i have been experimenting on making trojans and viruses undetectable since months...
here is wat u can do...
1. make ur own trojan or packer or comperssor (its the best if u can)
2. hex edit it.
3. stay up-to-date abt the packers/compressors/encryptors...
coz these stuff will get detected in weeks or months but the key is that u do ur work and escape before they get detected...
B) Happy GSOing