(Jul 10, 2012 02:30 PM)tweety Wrote: It is not FUD for life to my understanding. AV's also check if processes or memory is being tampered with, accessed system files, unusual behaviour and the usage of global keyboard hooks. Theirs more to it than just 'siginature'. If you are certain about this claim, distribute your stub to a few AV companies and we will see the outcome. At the very least upload it to VT.
Jul 10, 2012 02:35 PM (This post was last modified: Jul 10, 2012 02:35 PM by Wise.)
There was a Java Crypter that got detected and the seller ran away again. Never used it though since the seller had a bad rep, you can look it up here.
(Jul 10, 2012 01:54 PM)You Are Free Wrote: Driveby's aren't "FUD FOR LIFE" because of HTML elements and other related issues. Java signature may have a very minuscule part in it.
I used to respect you man. :(
Wrong, some antiviruses check the HTML (the shitty ones) and they usually give false positives, but most actually check the jar.