[pr0t0typ3]

I just tried, You can add as many thing you want after the filesize even using filesplit but then you would have to filter the eof data first

[SteloNLD]

yes it should be detected all of it as EOF Data. or i think so.

lol i though he explained me that file + file will be detected like 1 file for av's and file + normal-tekst + file been detekted as 2 files

this have's some logic you can't see diferents between tekst and tekst
and diferent between file and file

explain 0101010 + 01011100 is 010101001011100 if you dont know how each file looks then you even dont know wich is wich part

but when you have 0101010 + hello + 01011100 result 0101010hello01011100 then you see it :P

[GoldStar]

lol i though he explained me that file + file will be detected like 1 file for av's and file + normal-tekst + file been detekted as 2 files

this have's some logic you can't see diferents between tekst and tekst
and diferent between file and file

explain 0101010 + 01011100 is 010101001011100 if you dont know how each file looks then you even dont know wich is wich part

but when you have 0101010 + hello + 01011100 result 0101010hello01011100 then you see it :P

now even each char from hello is an 8-bit (byte). but what i mean is, avira will read all file, then there is defined structures of a valid win32 app (you can check any runpe and you will find them). then it will take that file and start filling those structures from data of the file. if the data matches the structure, no eof. if we filled all structures and there is some data left, eof not empty.

[SteloNLD]

:P i think i under stand but then then AV"S are seeing the diferents between Stub + file


but what i under stand from the code is that the EOF function he used isn't seeing the file as EOF data so this function is making simple coding harder

and i now even dont understand why it is not detected as dropper any more maybe someone could explain :P other wise i dont use it :P

[Deathader]

I find it's useful to use filesplits like this:
Dim fileSplit As String = "ïu¾‹Ç¨Õ®ipfx'f趷Íîªý"

For some reason they are a LOT more UD (I just open random exe's in notepad++ and mash 2 strings together)

[SteloNLD]

lol so far as i know it still doesnt matter because you can make you stub fud with ore without this function so every body should do what he like :P

[/etc/security/access.conf]

I was waiting for this from you mate.
Good release. I'll probably use it. Thanks!

-NoxiousHacker.

[South Park]

This looks nice, but I need a way to bypass avira without modifying the crypter - just the stub. It seems impossible at this point. I'm going to write some emails up claiming some files as false positive's and make them 100% legitimate files just to bypass avira on my crypters.

[Kōtei]

This looks nice, but I need a way to bypass avira without modifying the crypter - just the stub. It seems impossible at this point. I'm going to write some emails up claiming some files as false positive's and make them 100% legitimate files just to bypass avira on my crypters.

They are going to ask for file samples or their source.

[GodWall]

This tread was a nice read and thanks 4 the source, I get it but not 100% :)

[Deathader]

https://hackforums.net/showthread.php?tid=430500

Check that out. It's a great way to bypass avira.

[check24]

can everyone explaine me this in a little example pls whit the normal eway to use of data i have no problems but here ^^ :)
But When this works ,it a amazing thing
Bad English Ftw

[Cyrius42]

thanks a lot i have used it in my crypter

[Fake.]

Finally Something New , Thanks For The Share Budy and good work.

You're kidding right? A 1.5 year old thread is not new.

[Blizzard]

Thank you for this contribution. Really appriciated.