I want to design an antivirus targeted to only one trojan. I have multiples examples of this trojan. What is needed is to analyze the way this trojan works and to develop the program that will prohibit all its communications / kill it/ clean computer . The idea is to take the common part in all versions which is the injection of windows programs.
This program should be designed to launch at startup. Should be working if it is installed before or after the trojan arrives (both). Preferably encrypted. Should not be identified as a potential danger by any FWL or AV. In short, I am looking for a secure way to protect the computer.