|
Well, the reason people might not want to advertise that their protector hides its identity is because then the author of tools like PeID would find a way around it (ie: find a long enough signiture that is always present in the file, preferalbe at a static offset). Same for the information not being widespread. If everyone knows how to defeat the tools, then the authors will just find new methods. If the method(s) used to hide the protector are well known, then they will be easily defeated. And PeID hides it detection methods just as protectors hide thier anti-PeID methods.
Crudd [RET]
|