Hack Forums
[C#] Obfuscate without Virus Detections? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C#] Obfuscate without Virus Detections? (/showthread.php?tid=5865319)



Obfuscate without Virus Detections? - passwords - Jul 23, 2018

Is it possible to obfuscate your code without getting like 10+ detections on VirusTotal?
I'm currently trying out ConfuserEx which gives me 17/67 on normal.


RE: Obfuscate without Virus Detections? - 3DES - Jul 23, 2018

Write custom packer yourself.


RE: Obfuscate without Virus Detections? - kevy42 - Jul 23, 2018

(Jul 23, 2018 11:42 AM)3DES Wrote:  Write custom packer yourself.

u know, i dont think OP would ask this type of question if he knew how to make a good obfuscator


RE: Obfuscate without Virus Detections? - passwords - Jul 23, 2018

(Jul 23, 2018 12:09 PM)Tweety. Wrote:  why the fuck does this even matter

Finished working on an application people will buy, and I don't want them to download it after purchasing only to see a bunch of trojan warnings during runtime.


RE: Obfuscate without Virus Detections? - vmcall - Jul 23, 2018

You have a few options:
Get manually whitelisted
Buy a certificate
Remove any identifying characteristics from the known packer (metadata etc)

They most likely check for the confuser metadata value, or you're getting detected from previous malware samples that used similar packer, which triggers their heuristic engine


RE: Obfuscate without Virus Detections? - Vyxn - Jul 23, 2018

(Jul 23, 2018 12:56 PM)vmcall Wrote:  You have a few options:
Get manually whitelisted
Buy a certificate
Remove any identifying characteristics from the known packer (metadata etc)

They most likely check for the confuser metadata value, or you're getting detected from previous malware samples that used similar packer, which triggers their heuristic engine

Read this OP.
And to your buyer, tell them to whitelist your product. That's easy.


RE: Obfuscate without Virus Detections? - gky159 - Jul 23, 2018

dont use public obfuscater ,try Eazfuscator.NET and before do that you should scan your program maybe some code's trigger av's or as user above said Buy a certificate


RE: Obfuscate without Virus Detections? - Electron - Jul 24, 2018

(Jul 23, 2018 11:06 AM)NETGuard Wrote:  Is it possible to obfuscate your code without getting like 10+ detections on VirusTotal?
I'm currently trying out ConfuserEx which gives me 17/67 on normal.

It's impossible to get 17/67 with ConfuserEx. Maximum 2-5 detections, usually ESET (MSIL.Confuser detection) and perhaps Avira if your storage method is bad.

Remove your icon and generate random assembly information, then try different ways.


RE: Obfuscate without Virus Detections? - Miku2 - Jul 24, 2018

change your icon and assembly then obfuscate it .

use private modded confuserEX for better result


RE: Obfuscate without Virus Detections? - Electron - Jul 24, 2018

(Jul 24, 2018 08:33 AM)Miku2 Wrote:  change your icon and assembly then obfuscate it .

use private modded confuserEX for better result

If you want to be sure it's not the icon, simply remove it.


RE: Obfuscate without Virus Detections? - techcrunch - Jul 26, 2018

try private crypters mate


RE: Obfuscate without Virus Detections? - InterGalactic - Aug 15, 2018

Do not obfuscate with encryption method. Try obfuscating with fake code method.
This is working for me i get 4 out of 55 and this caused from softwares that report every unkown program as threat!