Hack Forums
Evade HEUR/AGEN.1042736 - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: Evade HEUR/AGEN.1042736 (/showthread.php?tid=6017822)



Evade HEUR/AGEN.1042736 - 10Ident - Oct 20, 2019

Hey guys,
anyone knows what is triggering HEUR/AGEN.1042736?

I'm having a hard time evading it. Also any place I could find list of signatures and what is causing them?

Cheers


RE: Evade HEUR/AGEN.1042736 - SIM-3132187 - Oct 20, 2019

Generaly it's because of ressources


RE: Evade HEUR/AGEN.1042736 - YAK_CODER - Oct 21, 2019

its avira detection 90% from icon


RE: Evade HEUR/AGEN.1042736 - Cyber Coder - Oct 21, 2019

this detection has been making my life hard for over 1 year since it started appearing.
Even tho it comes pretty rarely like once every 1-2 months i know i have to cancel all plans for at least half a day to get rid of it.
I usually add complex junk code then start altering the code that was already there and this seems to be doing the trick .
1 time it detected my file because it was missing the manifest info so is really random and unpredictable


RE: Evade HEUR/AGEN.1042736 - MadLabz - Nov 16, 2019

(Oct 21, 2019 07:41 AM)Cyber Coder Wrote:  this detection has been making my life hard for over 1 year since it started appearing.
Even tho it comes pretty rarely like once every 1-2 months i know i have to cancel all plans for  at least half a day to get rid of it.
I usually add complex junk code then start altering the code that was already there and this seems to be doing the trick .
1 time it detected my file because  it was missing the manifest info  so is really random and unpredictable

any hint about that ? https://i.imgur.com/UmXxTDO.png


also i fixed heur by renaming some class and with some "chain-linK"