Author Topic: Beating the virus scanners  (Read 469 times)

AW

  • Member
  • *****
  • Posts: 1300
  • Let's Make ASM Great Again!
Re: Beating the virus scanners
« Reply #15 on: May 03, 2018, 02:42:41 AM »

Raistlin

  • Member
  • ***
  • Posts: 341
Re: Beating the virus scanners
« Reply #16 on: May 03, 2018, 03:16:59 AM »
I know!! That's why I want to pull a kiddies tantrum.
The dollar signs - just KILL me. Between $995 & 600
for 3 yrs. Thats serious money in SA rand
terms.
Are you pondering what I'm pondering? It's time to take over the world ! - let's use ASSEMBLY...

Siekmanski

  • Member
  • *****
  • Posts: 1487
Re: Beating the virus scanners
« Reply #17 on: May 03, 2018, 05:28:19 AM »
I uploaded an exe file of my own, 4 detections
Then uploaded it as a zipped file, 3 detections ???
Creative coders use backward thinking techniques as their strategy.

AW

  • Member
  • *****
  • Posts: 1300
  • Let's Make ASM Great Again!
Re: Beating the virus scanners
« Reply #18 on: May 03, 2018, 10:49:17 AM »
I know!! That's why I want to pull a kiddies tantrum.
The dollar signs - just KILL me. Between $995 & 600
for 3 yrs. Thats serious money in SA rand
terms.

If you are doing a restricted distribution, you can use a free self signing certificate. If you are doing an open source distribution there are some guys that issue certificates for free or at low prices. If none of these, there are Comodo certificates issued by K-Software which are for around $80/year. If you want a VerySign certificate, you will pay more, but I don't know if virus scanners take the brand name into consideration.

Raistlin

  • Member
  • ***
  • Posts: 341
Re: Beating the virus scanners
« Reply #19 on: May 03, 2018, 03:18:18 PM »
Thanks aw27 - that's helpful - probably have to get the k-software one then.
But the days of no digital signing is most likely over for release software. <sad>
Are you pondering what I'm pondering? It's time to take over the world ! - let's use ASSEMBLY...

jj2007

  • Member
  • *****
  • Posts: 8437
  • Assembler is fun ;-)
    • MasmBasic
Re: Beating the virus scanners
« Reply #20 on: May 03, 2018, 06:04:14 PM »
If you are doing a restricted distribution, you can use a free self signing certificate.

https://www.sslshopper.com/article-how-to-create-a-self-signed-certificate.html

Brilliant - the next trojan that I post here will certainly have one!

AW

  • Member
  • *****
  • Posts: 1300
  • Let's Make ASM Great Again!
Re: Beating the virus scanners
« Reply #21 on: May 03, 2018, 06:18:27 PM »
If you are doing a restricted distribution, you can use a free self signing certificate.

https://www.sslshopper.com/article-how-to-create-a-self-signed-certificate.html

Brilliant - the next trojan that I post here will certainly have one!
You need volunteers to install your self signing certificate on their computers. This may be difficult.  :(

jj2007

  • Member
  • *****
  • Posts: 8437
  • Assembler is fun ;-)
    • MasmBasic
Re: Beating the virus scanners
« Reply #22 on: May 03, 2018, 06:50:16 PM »
No problem: The volunteers will upload my trojan to virustotal or Jotti, and a dozen AV will declare that the exe is safe because it has a certificate, a version control block, and even a manifest :P

AW

  • Member
  • *****
  • Posts: 1300
  • Let's Make ASM Great Again!
Re: Beating the virus scanners
« Reply #23 on: May 03, 2018, 08:40:13 PM »
No problem: The volunteers will upload my trojan to virustotal or Jotti, and a dozen AV will declare that the exe is safe because it has a certificate, a version control block, and even a manifest :P
You have an evil mind, a bit naïf, though.  :shock: