Posted: Wed Jul 29, 2009 10:22 am Post subject: Add New Section + Modify EP = Type_Win32...
Almost all the programs that are custom made (for changing ep and adding sections so basically all PE code injections) are marked by Kasperski Anti-Virus as Type_Win32. Why is this doing so? Is there a way to prevent this by adding some random junk to the code?
a lot of the time it detects by imports. try converting all 'suspicious' APIs to dynamic loading with GetProcAddress() and i'm sure a lot of the detections will go away
a lot of the time it detects by imports. try converting all 'suspicious' APIs to dynamic loading with GetProcAddress() and i'm sure a lot of the detections will go away
Ok I will try that. And also now it suddenly became not detected... O.o
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum