An Undetectable Bind

[lpgotti]

So i've been experimenting with different binding software/different PPI programs. I've been testing with an anti-virus to see which are flagged as malicious..the results are shit, I've yet to have one get by my anti-virus software.

Is there any PPI programs that offer undetectable installers? Or perhaps binding software that won't produce a 'dirty' file. Any help is appreciated.

 

[trakout]

There's this program called ProtEXE. Use it after you've finished binding the files.

Basically, it compresses the executable, making it smaller, and of course getting rid of unnecessary code. This effectively changes a bit of the hex code. Now, this isn't guaranteed to work, but there's a good chance it will, as hex-editing can usually make an old file a new one


ProtEXE


If you want to HEX manually, which, if you happen to know what part of the file the anti-virus (AV) keeps detecting, a tutorial is HERE.

This is extremely useful, and is common knowledge for most people who've been doing this for a while.

Of course, there is programs that cost a lot of money to 'encrypt' the file. Those work okay too, but I hope you can see that you have more options now

 

[lpgotti]

Hey thanks a lot for the info! I'll be reading up on it.

 

[titalian]

Good luck with the hexing you may just be corrupting your files and/or ruining you aff id link within it

 

[jayzee]

hehehe funny post titalian... does the ppi networks are to strict with this??

 

[titalian]

hehehe funny post titalian... does the ppi networks are to strict with this??

Nope they don't care but chances of corrupting the exe file and/or ruining the tracking ID within it is huge.....so best not to waste too much time with that

Unless you can code or know assembly language etc.....but at that point why not code your own adware ?

 

[nova]

But a point worth considering is that doing so will change the CRC of the file and im not sure if the PPI networks would count the install as an install if the checksum has changed.. and not to mention most ppi exe's are already packed, so can you pack them further?

 

[trakout]

But a point worth considering is that doing so will change the CRC of the file and im not sure if the PPI networks would count the install as an install if the checksum has changed.. and not to mention most ppi exe's are already packed, so can you pack them further?

Yes, most ppi exe's are packed, but most file binders leave the result of your ppi exe + your torrented file ect. = one uncompressed file.


Therefore, you can compress it once more..

 

[trakout]

Good luck with the hexing you may just be corrupting your files and/or ruining you aff id link within it

lol, good luck indeed. Truth is, you will need to experiment with your file, and get it just right.

But I'm afraid you can't argue that once you're successful, it's the best.

 

[exodusms]

you would definitely make bank if you found a way.

 

[titalian]

But I'm afraid you can't argue that once you're successful, it's the best.

Totally agree

 

[apekillape]

How could I "test" the file to make sure it still works though? I'd have to install on myself, and even then I wouldn't be able to check and make sure the affiliate code isn't damaged.

N

 

[flycr]

Haha dont go messing with the exe with a hex editor. You obliously dont know what you're doing

All the bytes are there for a reason and is the code. Changing it will just crash the exe. You may have a change to modify the exe using disassembler and a debugger like ollydbg, but its not really the right way to go (you will spend days, even months trying to modify the code so that it still does the same thing and also gets bypassed by most av's).

Just code your own exe binder and crypt the binded exes. Works perfectly, my exes go undetected by all antiviruses

 

[nova]

Yes, most ppi exe's are packed, but most file binders leave the result of your ppi exe + your torrented file ect. = one uncompressed file.


Therefore, you can compress it once more..

My binder packs the files.. so my PPI isnt being detected. A binder that doesn't compress the files is kinda lame LOL

 

[Therookie]

Thats great Nova - but still waiting for the release of your binder

Yes my quiet friend you are giving us immense pain and anguish waiting

 

[nova]

Yes my quiet friend you are giving us immense pain and anguish waiting

LOL, no guys not making you wait just for kicks. Ive been testing the software, plus another member from here is writing the tutorials that you will find useful, its basically like a step by step on how to make money with The Money Mastermind

 

[Therookie]

LOL, no guys not making you wait just for kicks. Ive been testing the software, plus another member from here is writing the tutorials that you will find useful, its basically like a step by step on how to make money with The Money Mastermind

That is marvellous thanks for taking the time from your heavy schedule to tell us the update.

(I am only joking with you really))

 

[nme]

http://rapidshare.com/files/102197944/EasyBinder.rar < Didn't write it, didn't upload it. Hope it works for you though.

 

[JinxY]

anyone messed with Morhpine PE encryptor from hxdef? it has full source code so it should not be hard to modify and make a stealth version.

 

[exodusms]

Has anyone dared try the binder that was posted in #19?