[Demoralise]

Norton SONAR detections mostly occur due to the control flow of a file and the network actions/activity performed by the file. Making these functionalities more complicated and difficult to analyse will enable you to bypass most of Norton's defenses.

This does not bypass Intrusion Prevention system which blocks files based on their digital signature (the case with known malware such as Imminent Monitor) but it will bypass the reputation system and everything else.

This can be easily done by obfuscating the crypted output with a modified version of ConfuserEx

[janulark]

Thank you for posting this simple trick!