+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [tut]HOW TO MAKE trojan almost FUD easly [tut] (/showthread.php?tid=277046)
[tut]HOW TO MAKE trojan almost FUD easly [tut] - Breakbot - Feb 17, 2010
Quote:new 2012 EDIT : hey there everyone , i've found new methods of making your servers undetectable ( UD ) of 90% , i'm making this pole to see how many people are interessted in this :) feel free to Vote
thank's a lot
hello everyone
nowadays crypting trojan don't give a good result if you use use a public crypter , otherwise you need to buy a private edition or to hex it .
so here's a little tip to how make it almost FUD .
we gonna need a ( Privacy Protection Software )
this kind of softwares is used by programs creators to protect their creation from cracking and reverse engineering . we gonna do the same
to a trojan and you are going to see the result 😉
first of alll you need to download the program : PC guard for win32
google is your friend 😉
let's start :
server's location ->
[img]http://img94.imageshack.us/img94/8449/29726338.jpg[/img]
then -> general
[img]http://img706.imageshack.us/img706/5905/91158931.jpg[/img]
Security & Encryption
[img]http://img141.imageshack.us/img141/351/50217601.jpg[/img]
Protection Method
[img]http://img707.imageshack.us/img707/8194/47781258.jpg[/img]
and we are done ! 😏
results :
poison ivy server :
[img]http://img30.imageshack.us/img30/2347/scnnp.jpg[/img]
bifrost server :
[img]http://img13.imageshack.us/img13/6002/scanno.jpg[/img]
hope it works for you guys
🎉
any questions ? Pm me and i will answer you as soon as i can .
PS :SORRY I'm not used to speak english .
* - Mar0x - Feb 17, 2010
Nice tutorial. I just tried it on a CyberGate server and it got detected by 3 of out 19 Anti-viruses.
The only down side was that a notification popped up stating it had been protected by the demo version.
* - Falconidae - Feb 17, 2010
Very nice tutorial! I shall be using this method.
* - Mr Evil Chaos - Feb 17, 2010
BEFORE
Spoiler (Click to View)
AFTER
Spoiler (Click to View)
Do you know who to get the full one free?
* - -mothered- - Feb 17, 2010
Looks Interseting. Will have to go through It before making any conclusive comments.
Thanks for the share :)
* - Breakbot - Feb 17, 2010
"" BEFORE
Spoiler (Click to Hide)
File Info
Report date: 18.2.2010 at 3.17.45 (GMT 1)
File name: MicrosoftGen.exe_OLD
File size: 471040 bytes
MD5 Hash: c5fcf85cd653ea7acb544434f2f68345
SHA1 Hash: E351562937C9E413B79E85AB83A76C2B0B30C06F
Detection rate: 10 on 19
Status: INFECTED
Detections
a-squared - Virus.Win32.Delf!IK
Avira AntiVir - TR/Spy.Gen
Avast - Win32:Malware-gen
AVG - SHeur2.BYZM
BitDefender - Trojan.Generic.2889296
ClamAV - Trojan.Agent-134263
Comodo - -
Ewido - -
F-PROT6 - W32/Trojan2.LFCU
G-Data - -
Ikarus T3 - Virus.Win32.Delf
Kaspersky - HEUR:Trojan.Win32.Generic
McAfee - -
NOD32 - Win32/Lypserat.A
Panda - -
Solo Antivirus - -
TrendMicro - -
VirusBuster - -
ZonerAntivirus - -
Scan report generated by
NoVirusThanks.org
AFTER
Spoiler (Click to Hide)
File Info
Report date: 18.2.2010 at 3.17.42 (GMT 1)
File name: MicrosoftGen.exe
File size: 559616 bytes
MD5 Hash: 29c9f252e30615a8be109267446ea28a
SHA1 Hash: 1A1EECDB616EF0485C38AD736722EE8FC2E4E682
Detection rate: 3 on 19
Status: INFECTED
Detections
a-squared - -
Avira AntiVir - DR/Delphi.Gen
Avast - -
AVG - -
BitDefender - -
ClamAV - -
Comodo - -
Ewido - -
F-PROT6 - -
G-Data - -
Ikarus T3 - -
Kaspersky - HEUR:Trojan.Win32.Generic
McAfee - -
NOD32 - Win32/Lypserat.A
Panda - -
Solo Antivirus - -
TrendMicro - -
VirusBuster - -
ZonerAntivirus - -
Scan report generated by
NoVirusThanks.org ""
PS : i didn't say that it going to be FUD but almost fud xD
* - Charity - Feb 17, 2010
Good + original tutorial. Have seen a couple like this but this has new stuff, so it's good, IMO.
* - Breakbot - Feb 17, 2010
Quote: Nice tutorial. I just tried it on a CyberGate server and it got detected by 3 of out 19 Anti-viruses.
The only down side was that a notification popped up stating it had been protected by the demo version.
then you gotta find a full version ✌
Quote:Very nice tutorial! I shall be using this method.
thanks
Quote:Looks Interseting. Will have to go through It before making any conclusive comments.
Thanks for the share :)
please tell me what the result is 😉
Quote:ood + original tutorial. Have seen a couple like this but this has new stuff, so it's good, IMO.
you're welcome . 👍
* - Mr Evil Chaos - Feb 17, 2010
i know it aint FUD but im guessing the FUD will but in the full one
* - Black Hat Jack - Feb 17, 2010
This has been known for a while. but thanks for the share. its great for some people that cant afford a great crypter!
and btw. @ casarat; dont use that scanner any more. it spreads like mad to anti virus corps. if you want it to stay slightly UD long. only. and i mean only scan with "no virus thanks", and make SURE "do not distribute samples" is checked.
* - Neroxan - Feb 17, 2010
(Feb 17, 2010 08:12 PM)cm31 Wrote: i know it aint FUD but im guessing the FUD will but in the full one
Keep guessing. Protection software is often found as viruses because they are used on legit and malicious applications.
Themida shows as virus if you compile a clean project and protect it with it, this is no different.
However I do have a private protection software that Im gonna try with this now.
Nice to see the guide in english instead of having to translate it, thanks😁
* - Breakbot - Feb 18, 2010
Quote:and btw. @ casarat; dont use that scanner any more. it spreads like mad to anti virus corps. if you want it to stay slightly UD long. only. and i mean only scan with "no virus thanks", and make SURE "do not distribute samples" is checked.
Codeyeah i know , thanks anyways 😁
* - Gino90 - Feb 18, 2010
Well this has been known for a while but great tut dud, and also the crypted file will run only about 20 times in the demo version. anyway, thanks for sharing buddy.
* - Breakbot - Feb 18, 2010
you're welcome .
i will try to find a full version . and post the RS donwload link.
* - digger183 - Feb 18, 2010
Thanks for the tut, I just dont like the demo thing xD.