.
Our FUDDING tool requirements and download links.
DOWNLOAD HERE
File splitter to split our servers to find out where the virus signature is to modify it.
DOWNLOAD HERE
Best hexeditor I have found and its free of charge.
DOWNLOAD HERE
Okay now once you have placed the server in a file lets scan it.
the file splitter browse to the server you want to split and choose
Custom size. Now it tells me that this server is exactly 53,495 bytes
and I want to split it into 4 pieces. So I go to Calc and divide it by 4
now place the you got after dividing it and place it in the
splitter custom size box like I have at the bottom. Now click on Split.
Now once you have figured it out make a new folder named the part
that was detected now I got part 3 so I'm gonna make a new folder
named 3 .
Now I
hope you didn't close file splitter if so reopen it and browse to
test.exe.3 to split and change the output folder to 3 like I have in the
picture below. We are also going to split this file into 4 pieces again
so open up Calc and divide by 4.
Now
scan ch file again to figure out witch file we need to split but also
be aware of how small the file is getting. Once you figure out witch
file needs splitting make a new folder with the parts name. I got part
test.exe.3.3 so I am going to make a new folder and name it 3.
Now
once you made new folder named 3 open up file splitter and browse to
the file that got detected mine was test.exe.3.3 and pick the output
directory to the folder we just made witch was the folder named 3.
browse to the new folder and scan the new files we split. As you can
see test.exe.3.3.4 was detected so I'm gonna make a new folder and name
it 4.
Now lets scan the new files and see witch got detected ocne we find it open it up with the HEXeditor and see if its still to big to figure out what we need to change.
the virus signature is in here don't get scared its not that hard now
my method of figuring it is looking for something that stands out or
guesssing. All you rlly have to do is change a letter from capital to a
lower case one now what worked for me was changing D to a lower case
from the wordDLLHOOKSTRUCT.
Congratz now its FUD now all you need to do it compile it and scan it one more time and run it to test.
Now compiling I will show you one example and you can figure out the rest by your own.
Now you see the splitter icon inside your folder click on it and it will recompile the file.
Now
once you made that file copy it and go back one directory and past itthen it will ask you to replace it click yes and keep doing this tillyou go back to first directory. And your done.
I rlly hope you lrn something this took me like 3 hours.
No comments:
Post a Comment