Beating the virus scanners

[aw27]

With proper certificates and manifests virus scanners curb like slaves:

https://www.virustotal.com/#/file/b0b92383276b188c7e8b0485977709a25e476b7ed31e935e5930309ea810f4cb/detection

[Raistlin]

I know!! That's why I want to pull a kiddies tantrum.
The dollar signs - just KILL me. Between $995 & 600
for 3 yrs. Thats serious money in SA rand
terms.

[Siekmanski]

I uploaded an exe file of my own, 4 detections
Then uploaded it as a zipped file, 3 detections ???

[aw27]

I know!! That's why I want to pull a kiddies tantrum.
The dollar signs - just KILL me. Between $995 & 600
for 3 yrs. Thats serious money in SA rand
terms.

If you are doing a restricted distribution, you can use a free self signing certificate. If you are doing an open source distribution there are some guys that issue certificates for free or at low prices. If none of these, there are Comodo certificates issued by K-Software which are for around $80/year. If you want a VerySign certificate, you will pay more, but I don't know if virus scanners take the brand name into consideration.

[Raistlin]

Thanks aw27 - that's helpful - probably have to get the k-software one then.
But the days of no digital signing is most likely over for release software. <sad>

[jj2007]

If you are doing a restricted distribution, you can use a free self signing certificate.

https://www.sslshopper.com/article-how-to-create-a-self-signed-certificate.html

Brilliant - the next trojan that I post here will certainly have one!

[aw27]

If you are doing a restricted distribution, you can use a free self signing certificate.

https://www.sslshopper.com/article-how-to-create-a-self-signed-certificate.html

Brilliant - the next trojan that I post here will certainly have one!

You need volunteers to install your self signing certificate on their computers. This may be difficult.  :(

[jj2007]

No problem: The volunteers will upload my trojan to virustotal or Jotti, and a dozen AV will declare that the exe is safe because it has a certificate, a version control block, and even a manifest :P

[aw27]

No problem: The volunteers will upload my trojan to virustotal or Jotti, and a dozen AV will declare that the exe is safe because it has a certificate, a version control block, and even a manifest :P

You have an evil mind, a bit naïf, though.  :shock: