Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   Problem with Anti-Virus and PE-Protector (https://forum.exetools.com/showthread.php?t=2307)

Fred 06-26-2003 19:38

Problem with Anti-Virus and PE-Protector
 
Hello,

I have a small PE-Protector.

Bud for 2 weeks F-Rescure, McAffe know then a new variant virus.
I tell this problem F-Resure and tell them that your false error.

They tell back that this problem will be clear.
So my question:

If I make a new version what must I do that no Anti-Virus Problem?

Thank you

dj-siba 06-27-2003 03:24

Change your code
 
try to change a bit the waY YOUR small PE-Protector add it's code to the host program...
in most case Anti-virus guess that it's a virus when they found out a porstion of added code that jumps back or something...Heristic!

hope this helps

bart 07-02-2003 08:18

Quote:

This is a false alarm of our heuristics engine. The files you sent cause
false alarms because:

1. Code execution starts from the last section
2. Sections that execution starts in is not marked as code section
3. Code is placed in a section that has a non-standard name
4. File's header has incorrect section sizes
5. Startup code looks like a decryptor of a polymorphic virus
note from F-Secure support about pe-protectors


All times are GMT +8. The time now is 16:25.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX