nihil ur on track. what those ppl refer to in "hexing" is adding binary spaces to transform certain strings within a malware to avoid detection, but doesnt kill its function. do u know if it still works on today's new AV. im assuming that av scanners are able to bypass this sort of method and do its job.