Hi. So, if I have malicious file in my computer, scanning of file system (or something like that) tagged that file as a danger. If I obfuscated this malicious file (e.g. with NOP instructions or adding JMP instructions), then scanning of file system not tag that it is a dangerous file. But if after run this file is into memory, what is reaction resident shield of antivirus on this file? Obfuscated file is running in memory, is it tagged by resident shield or what? Excuse my english. Can somebody help me? PLEASE
Two safe(r) ways to go about this:
[ol]- Upload your file to Virus Total [dot] com and scan
- Run your file in a VM (Virtual Machine) and see what happens[/ol]
Common technique for malware writers to see if their malware is detected or not. Is this what you’re trying to find out? Second option would allow your file to run as is.
Thank for response. But, I need answer for that question- What is the reaction of resident shield on obfuscated file? If the file system scanning don´t tag obfuscated file, what is doing when I run this file, it will be tag as malicious by resident shield or not? Thanks.