Log in

View Full Version : How to bypass Norton AV2004 emulator?


1crazy4u
April 12th, 2004, 22:33
A packer modified by me starts extremely slow(about 20 sec), after I disabled the auto-protect of Norton AV2004, it starts as fast as normal, , I think it is because of emulator of Norton AV2004, so, is anyone have some experiences or methods to bypass it(do not tell me just disable it,. Any information is appreciated.

mmk
April 12th, 2004, 22:40
If you don't modify the packer NAV might recognize it and optimize the execution (eg. unpack it first before emulating instructions).

Also try running the unpacked program to test if it's really caused by packing it or something else.

1crazy4u
April 12th, 2004, 23:02
Quote:
[Originally Posted by mmk]If you don't modify the packer NAV might recognize it and optimize the execution (eg. unpack it first before emulating instructions).

Also try running the unpacked program to test if it's really caused by packing it or something else.

Thank you for your replying, I'm sure it's NAV's fault, if i do not pack the program, everything is OK. For some reason , I need to modify the packer. Any better idea?

SpeKKeL
April 13th, 2004, 03:43
Howdy,

I always used trend-micro's PC-cillen Anti-virus but some time ago i gave nav a try, must say i switched back verry fast to pc-cillen updating,scanning (sure for packed files) took much longer..
By-passing doesn't seems a good idea..

Greets,

SpeKK.

%UNDEFINED%
April 13th, 2004, 20:20
Might I enquire as to the name of the packer?