| Author |
Message |
Guests
Guest Group
|
 Topic: Sub Seven (urgent) Posted: 28 Mar 2000 at 03:07 |
|
Sub Seven (urgent)
How do avoid having the Sub7 server get detected by hotmail's mcafee virus scanner? I've tried binding it, with no success.Thanks in advance.
|
|
|
IP Logged |
|
Guests
Guest Group
|
 Posted: 28 Mar 2000 at 03:38 |
|
Re: Sub Seven (urgent)
Use the Joiner...not sure of the URL, I know it is made by the same guy who made TheThing.
|
IP Logged |
|
deej
Admin Group
Joined: 22 Nov 1997
Online Status: Offline
Posts: 3
|
 Posted: 28 Mar 2000 at 12:01 |
|
Re: Sub Seven (urgent)
but the pattern of code picked up by virus scanners would still be there, wouldn't it?
|
IP Logged |
|
Guests
Guest Group
|
 Posted: 28 Mar 2000 at 13:07 |
|
Re: Sub Seven (urgent)
Yup, sure would.So just decompile it, move around the functions, rename some shit, then recompile it. Taddaaaa :P
|
IP Logged |
|
Guests
Guest Group
|
 Posted: 28 Mar 2000 at 14:05 |
|
Re: Sub Seven (urgent)
Decompile? If it's not too much to ask, could you be spesific?
|
IP Logged |
|
Guests
Guest Group
|
 Posted: 28 Mar 2000 at 20:09 |
|
Re: Sub Seven (urgent)
This one is well known by aby virusscanner if you are a debugger you know how to decompile, otherwise if youre a coder then make one youreself last one if you aren't any of the above find a new trojan
|
IP Logged |
|
Guests
Guest Group
|
 Posted: 28 Mar 2000 at 20:19 |
|
LoL, Group effort -nt-
|
IP Logged |
|
Guests
Guest Group
|
 Posted: 28 Mar 2000 at 23:36 |
|
Re: Sub Seven (urgent)
I'd get someone to do it for you if you don't know what I'm talking about.Basically a decompiler will take the program from machine code back to whatever it was written in [I have no idea what SubSeven was done in].The problem is, virus scanners probably have the signatures that are individual methods and what not, so even if you move them around within the program itself, the signatures are still there. The only way to get around this would be to rename variables/methods like I said before, rearrange the coding [so it still works, though], or rewrite some of it.Sometimes one of the trigger signatures that scanners look for is the coder's own signature that they stick somewhere in the coding. Mixter did it with TFN[2K].
|
IP Logged |
|