Quote:
Originally Posted by RyujiYazamazaki
|
Here's what I mentioned earlier in another thread regarding that scan:
Quote:
|
Originally Posted by pushedx
Quote:
|
Originally Posted by bheaven
edit:
i noticed your client (taken from page 13) is about ~12MB while mine is only ~9,5MB.
furthermore yours is detected as a possible thread by my antivirus.
did you use stripper or ollyscripts to unpack it?
|
I used an OllyDbgScript. The ASProtect section is left intact, which is why the exe is larger and also why your AV detects it as a 'virus'. If stripper didn't take out the ASProtect section, you'd see the same results.
I'll check out the client later today, I only recently got the stripper program, but I don't use it for ISRO/KSRO, just JSRO.
|
Clients that used stripper are smaller and do not contain the ASProtect section that those AVs are detecting as 'possible malware'. I wasn't pleased with how the program worked, so I just use an OllyDbgScript for my client.
Since I'll be uploading clients in my thread, I'll just use the Stripper generated exe in the future, but only after testing them to make sure they still work the same as the client that still contains the ASProtect section,