zero

Hacking a bypass around Windows Security.

08:18pm. In my last blogpost, I said that Windows Defender is interrupting smooth functioning of ur_waifu, a computer worm I am trying to create. Well, I found out that creating new processes from an executable is impossible through the CreateProcessA function catered by the Win32 API.

I have found workaround. If I cannot create new processes, then I will make sure the operating system itself does the job for me sooner or later. Instead of executing the replicas myself, I can replicate the worm in the Startup folder. Then, multiple processes of the worm will be executed the next time the OS boots/reboots.

#blog