+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] Who can tell me how anti virus software works? (/showthread.php?tid=6103615)
Who can tell me how anti virus software works? - boruto6677 - Aug 18, 2020
I really want to know how anti-virus software works, I have looked at some information on wikipedia but I think it is not very complete. Can someone tell me how anti-virus software works? And how does stub and crypter work so that the antivirus can't detect the payload?
RE: Who can tell me how anti virus software works? - devlightz - Aug 18, 2020
I'm not cyber security guy but I think the basic idea is an Anti virus decompiles and scans the code of files and applications and looks for known malicious code. A crypter/obfuscator takes your code and makes it almost unreadable so that these malicious code blocks arent recognizable by the anti virus software. Someone please correct me if I'm wrong but I'm pretty sure this is the basic idea of both types of software.
RE: Who can tell me how anti virus software works? - The Amazing Sinner - Aug 18, 2020
Signature-based detection detects by comparing a virus signature ( a binary pattern of known viruses) against files being scanned. Heuristic-based detection detects behavior in and patterns of code that indicates a virus may be present.
If you need any help encrypting/recoding a stub let me know.
Shoot me a PM.
RE: Who can tell me how anti virus software works? - boruto6677 - Aug 18, 2020
(Aug 18, 2020 08:09 AM)devlightz Wrote: I'm not cyber security guy but I think the basic idea is an Anti virus decompiles and scans the code of files and applications and looks for known malicious code. A crypter/obfuscator takes your code and makes it almost unreadable so that these malicious code blocks arent recognizable by the anti virus software. Someone please correct me if I'm wrong but I'm pretty sure this is the basic idea of both types of software.
(Aug 18, 2020 08:11 AM)TheSinner Wrote: Signature-based detection detects by comparing a virus signature ( a binary pattern of known viruses) against files being scanned. Heuristic-based detection detects behavior in and patterns of code that indicates a virus may be present.
If you need any help encrypting/recoding a stub let me know.
Shoot me a PM.
Thanks!!