Example of simple Binder, Include Source Code.
The Source of Stub is FUD but File Binded Detected for Avira, but path stub for No detect File Binded for Avira

Sorry for Scan in VT but NVT not is functional
Scan 16/12/2009 - 09:30am GMT-5:

Download:

Disculpa, al parecer me tome tu expresion a mal, ya he añadido un Mirror de la descarga a SendSpace en el post principal, Black Agradeceria tus criticas asi podria mejorar ^^

Por que tu respuesta BlackZeroX??? Por mi baja cantidad de post?

Features:
 - 6 Directories for Save Server
 - Error Fake Message
 - Execute Server
 - Hide Server as file system
 - Antianubis
 - Persistence (If server downloaded is not present then download server egain)
 - Binder
 - Run BindFile (Run File Binded)

Coder: The Swash
Helpers: D4RK_J4V13R & ShakI
Webs: www.Scblabs.es & www.Indetectables.Net

Deteccions of Stub:
File Info

Report generated: 15.12.2009 at 0.17.43 (GMT 1)
Filename: Zt3.exe
File size: 16384
MD5 Hash: da958154dbadf9d4f8223cf6e9ba2c87
SHA1 Hash: 00C355068A82C13105F5BF0BC1F65922B4EBE2EC
Self-Extract Archive: Nothing found
Binder Detector: Nothing found
Detection rate: 3 on 24

Detections

a-squared - -
Avira AntiVir - TR/VB.Downloader.Gen
Avast - -
AVG - -
BitDefender - -
ClamAV - -
Comodo - -
Dr.Web - -
Ewido - -
F-PROT6 - -
G-Data - -
Ikarus T3 - -
Kaspersky - -
McAfee - trojan or variant New Malware.d
NOD32 v3 - NewHeur_PE virus
Norman - -
Panda - -
QuickHeal - -
Solo Antivirus - -
Sophos - -
TrendMicro - -
VBA32 - -
VirusBuster - -
ZonerAntivirus - -

Scan report generated by
NoVirusThanks.org

Download Binary + Src Code

New Link

Esta Api URLDownloadToFileA ha Sido muy usada para la base de muchos downloaders, ademas consume mucho la CPU y si es detectada por varios AVs generalmente Avira, F-PROT6, Bitdefender y Kaspersky. Te recomiendo hacer caso a Karkrack y usar APis de Winnet.