+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] Discount Crypter [Scantime] (/showthread.php?tid=4416499)
Pages: Pages
1
2
Discount Crypter [Scantime] - Cracken06 - Aug 26, 2014
Hi guy,
I make a simple crypter scantime in vb.NET and i share it. (You can reFUD it, because isn't FUD anymore)
Hope it will be helpfull and hope you enderstand what i say, because i don't speak english fluenty. 🤨
Enjoy.
🎉
Click Me!
Crypter scan
Screen
Stub scan
* - taktaktak - Aug 26, 2014
No file scans, screen shots, videos? This is about as sketchy as they get m8...
* - Cracken06 - Aug 26, 2014
sorrry i add a scan...and screen...
* - еlixir - Aug 26, 2014
Does anyone see an issue with the scan log?
Filename: discount crypter.sln
Filesize: 0.876 KB
MD5: 3951a91e1953f7f45c829f99dd115165
Hmm, maybe it's just me.
* - RKYDA - Aug 26, 2014
(Aug 26, 2014 10:47 PM)Dr. Caspers Wrote: Does anyone see an issue with the scan log?
Filename: discount crypter.sln
Filesize: 0.876 KB
MD5: 3951a91e1953f7f45c829f99dd115165
Hmm, maybe it's just me.
I closed the thread when I've seen this : Result: 0/34
Regards,
* - É¡ringo - Aug 27, 2014
You guys are ridiculous, it's the source code, if you're going to bother to use this then you can check for backdoors yourself.
* - TheBarret - Aug 27, 2014
kids with 10 post and -3 rep, i wouldn't even touch the lil brat.
* - $lick - Aug 27, 2014
(Aug 26, 2014 11:12 PM)Who Soup Wrote: is this file clean? can anyone confirm? Virus total says it's a virus
Virus Total Scan:
https://www.virustotal.com/en/file/06790efad6af06f8c20e9f676ddb9e9d44338a961e1f2142a528d6b68dca8a5c/analysis/1409119779/
Preview:
![[Image: pixEg4n.png]](https://i.imgur.com/pixEg4n.png)
You scanned the rar file that contains all the files.
OP scanned the sln file.
You can check the source yourself to see if there are any backdoors.
I'm pretty sure a sln file can't infect you.
* - Cairns - Aug 27, 2014
Last I checked, the solution file can indeed infect you. That's why Visual Studio prompts you a message stating that you should never trust anyone elses source code, and do you want to continue to open it.
* - $lick - Aug 27, 2014
(Aug 27, 2014 01:57 AM)Cairns Wrote: Last I checked, the solution file can indeed infect you. That's why Visual Studio prompts you a message stating that you should never trust anyone elses source code, and do you want to continue to open it.
It can if you debug it.
But VS doesn't execute anything on startup.
* - Cracken06 - Aug 27, 2014
Guys it's not a virus, i don't want to infect you, i coded this crypter myself and i confirm it's not a fucking virus.
I'm going to change the scan.
* - nuk - Aug 27, 2014
I thought there was actually a way to infect source (without compile/debug being clicked)... I remember seeing something on that on this forum a while back? I couldn't tell you for sure or not cuz there are some things that truly amaze me that these peepz figure out LoL
* - taktaktak - Aug 27, 2014
(Aug 27, 2014 01:30 AM)๖ۣۜLazy™ Wrote: You scanned the rar file that contains all the files.
OP scanned the sln file.
You can check the source yourself to see if there are any backdoors.
I'm pretty sure a sln file can't infect you.
He could make an exe change the extension to sln then just slap an icon on it, same goes with the .vbproj file you try to run :/
* - $lick - Aug 27, 2014
(Aug 27, 2014 05:24 AM)icemantheditor Wrote: He could make an exe change the extension to sln then just slap an icon on it, same goes with the .vbproj file you try to run :/
Extension spoofing doesn't work like that.
The scanning site will get the correct extension no matter what.
* - 0xBB - Aug 27, 2014
(Aug 27, 2014 02:02 AM)๖ۣۜLazy™ Wrote: It can if you debug it.
But VS doesn't execute anything on startup.
You don't need to debug it to get infected by any .netproject. Just opening it, (it doesnt even need to have any compiled .exe inside).
Just open in notepad ++ instead of a IDE to avoid that kind of infection.