i decided to code a new worm virus as a poc ... anyway i used nanomite method to infect packed executables. it seeks for the check crc & other functions to decide if its gonna inline patch or not & here is the big but .... it keeps infecting every non packed executables with the evil code while its already have the signature. now it can bypass some firewalls & every antivirus out there & my code uses a new method that will make it undetectable by antivirus that use tracing or virus signature database method. i am thinking of rewriting the code and add some new methid of seek & infect [bool watchactivity(string file, sig);] & [bool seekmsiexe();] & [void watchmem();] . now i dont know what am i gonna do, as i am thinking of sharing the source.
Posted on: Fri, 14 Jun 2013 19:03:01 +0000
Trending Topics
Recently Viewed Topics
© 2015