Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

C# 

Obfuscate without Virus Detections?

Is it possible to obfuscate your code without getting like 10+ detections on VirusTotal?
I'm currently trying out ConfuserEx which gives me 17/67 on normal.
Write custom packer yourself.
(Jul 23, 2018 11:42 AM)3DES Wrote:  Write custom packer yourself.

u know, i dont think OP would ask this type of question if he knew how to make a good obfuscator
(Jul 23, 2018 12:09 PM)Tweety. Wrote:  why the fuck does this even matter

Finished working on an application people will buy, and I don't want them to download it after purchasing only to see a bunch of trojan warnings during runtime.
You have a few options:
Get manually whitelisted
Buy a certificate
Remove any identifying characteristics from the known packer (metadata etc)

They most likely check for the confuser metadata value, or you're getting detected from previous malware samples that used similar packer, which triggers their heuristic engine
(Jul 23, 2018 12:56 PM)vmcall Wrote:  You have a few options:
Get manually whitelisted
Buy a certificate
Remove any identifying characteristics from the known packer (metadata etc)

They most likely check for the confuser metadata value, or you're getting detected from previous malware samples that used similar packer, which triggers their heuristic engine

Read this OP.
And to your buyer, tell them to whitelist your product. That's easy.
[Image: signaturetwo.png]
dont use public obfuscater ,try Eazfuscator.NET and before do that you should scan your program maybe some code's trigger av's or as user above said Buy a certificate
(Jul 23, 2018 11:06 AM)passwords Wrote:  Is it possible to obfuscate your code without getting like 10+ detections on VirusTotal?
I'm currently trying out ConfuserEx which gives me 17/67 on normal.

It's impossible to get 17/67 with ConfuserEx. Maximum 2-5 detections, usually ESET (MSIL.Confuser detection) and perhaps Avira if your storage method is bad.

Remove your icon and generate random assembly information, then try different ways.
change your icon and assembly then obfuscate it .

use private modded confuserEX for better result
(Jul 24, 2018 08:33 AM)Miku2 Wrote:  change your icon and assembly then obfuscate it .

use private modded confuserEX for better result

If you want to be sure it's not the icon, simply remove it.
try private crypters mate
Do not obfuscate with encryption method. Try obfuscating with fake code method.
This is working for me i get 4 out of 55 and this caused from softwares that report every unkown program as threat!


Possibly Related Threads...
Thread / Author Replies Views Last Post
[Python] by ro0tiJun 10, 2025 07:21 PM 0 234 Jun 10, 2025 07:21 PM
Last Post: ro0ti
[.NET] by 0x1GENMar 23, 2021 05:55 AM 1 236 Mar 23, 2021 05:55 AM
Last Post: Rmdy
[C] by helloworld112Jul 11, 2020 02:40 AM 1 152 Jul 11, 2020 02:40 AM
Last Post: greasyAlessandra