+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: [Help] Scanners show FUD result but server is still detected by Norton (/showthread.php?tid=4286682)
[Help] Scanners show FUD result but server is still detected by Norton - Welcome2DMarket - Jun 15, 2014
Greetings users,
I have recently been getting into Darkcomet with assistance from my friend who tests my file with his anti-virus. Although nodistribute.com shows that the file is FUD, Norton still manages to detect my virus and delete it.
The victim appears on DarkComet when Norton is turned off and remains after Norton is turned back on. However, when the file is downloaded as the victim already has Norton enabled, it picks it up immediately. Any ideas on why this is so?
Any help regarding this issue will be appreciated. I am sorry if this comes up as a stupid question for all you advanced hackers out there.
I use Arcane Crypter.
Virus Scan Result ✌
* - zzzzzzzzzzzz - Jun 15, 2014
May the Crypter Scantime FUD but not Runtime FUD.
* - Anonmoosekaab - Jun 15, 2014
(Jun 15, 2014 03:36 AM)Welcome2DMarket Wrote: Greetings users,
I have recently been getting into Darkcomet with assistance from my friend who tests my file with his anti-virus. Although nodistribute.com shows that the file is FUD, Norton still manages to detect my virus and delete it.
The victim appears on DarkComet when Norton is turned off and remains after Norton is turned back on. However, when the file is downloaded as the victim already has Norton enabled, it picks it up immediately. Any ideas on why this is so?
Any help regarding this issue will be appreciated. I am sorry if this comes up as a stupid question for all you advanced hackers out there.
I use Arcane Crypter.
Virus Scan Result ✌
That's pretty weird, exactly what settings are you using in DC and Arcane Crypter? Also did you enable Norton's cloud service? If it's enabled when crypting then the file is submitted to Norton's database and is detected
* - xVulnerable - Jun 15, 2014
FUD on scantime does not mean FUD on runtime.
* - Welcome2DMarket - Jun 15, 2014
Thanks for the replies. I will probably switch crypters in the near future.
* - NCluke - Jun 15, 2014
If you use delayed execution you can sometimes bypass runtime detection but it's not a guarantee