+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: How AV killers work. (/showthread.php?tid=4457569)
How AV killers work. - IcYSeptember - Sep 22, 2014
Just thought I'd write up a quick paper on how AV killers work.
I'm not going into detail about how the file is deleted, or how any of the advanced stuff works...because that stuff is private, not a lot of people know that, I think.
Not a lot of people know the part I'm telling you, either.
This is not meant to bring on a new wave of skid malware that disables your AV, this is to bring common knowledge on how these things work so that they can be stopped.
Okay! On to the fun.
What is an AV killer?
Spoiler (Click to View)
How do they work?
Spoiler (Click to View)
I'll be releasing an AV killer tool in the Hacking Tools section in a few minutes, and I'll link to it here.
Edit: https://hackforums.net/showthread.php?tid=4457573
* - kannss - Sep 22, 2014
thanks for proving good information sir
Waiting for tool to release
* - Austerity - Sep 22, 2014
Very interesting piece of work you have made here, keep it up!
* - TheExclusive - Sep 23, 2014
Thanks for this very usefull information
* - Edge of Nowhere - Sep 23, 2014
I was surprised that I actually learned something from HF.
Good work, we need to talk in private. Have an interesting proposition for you.
* - Meow - Sep 23, 2014
Again,not sure what are you talking about but I'm sure it's some 1337 1-day Elite Sandboxie h4x0r shit!
Icy is very experienced 'hacker'.
* - Edge of Nowhere - Sep 23, 2014
(Sep 23, 2014 06:12 AM)Meow. Wrote: Again,not sure what are you talking about but I'm sure it's some 1337 1-day Elite Sandboxie h4x0r shit!
Icy is very experienced 'hacker'.
Bashing yet you didn't take 2 minutes to watch the video. It might not be a 0day, but it's equally as useful if used correctly.
Don't be mad he posted something useful and that you didn't.
* - Meow - Sep 23, 2014
(Sep 23, 2014 06:15 AM)01000101 Wrote: Bashing yet you didn't take 2 minutes to watch the video. It might not be a 0day, but it's equally as useful if used correctly.
Don't be mad he posted something useful and that you didn't.
HE IS MY CLOSE FRIEND AND I'M JOKING WITH HIM YOU DUMB..🤦♂
* - Edge of Nowhere - Sep 23, 2014
(Sep 23, 2014 06:16 AM)Meow. Wrote: HE IS MY CLOSE FRIEND AND I'M JOKING WITH HIM YOU DUMB..🤦♂
I'm supposed to know this? Next time, just don't post.
Just makes you look like an ignorant fool.
* - IcYSeptember - Sep 23, 2014
(Sep 23, 2014 06:17 AM)01000101 Wrote: I'm supposed to know this? Next time, just don't post.
Just makes you look like an ignorant fool.
Haha. It's fine, don't worry.
(Sep 23, 2014 06:07 AM)01000101 Wrote: I was surprised that I actually learned something from HF.
Good work, we need to talk in private. Have an interesting proposition for you.
I'm glad I could teach you something.
If you want to talk, PM me with your Skype/Jabber. :)
* - Yoshikage Kira - Sep 23, 2014
There are some other options, I forget how betabot does it, but I am pretty certain it does not do this. I also remember that Jack's channel(before it got removed) uninstalled a few av's if they had the silent uninstall option.
* - IcYSeptember - Sep 23, 2014
(Sep 23, 2014 08:05 AM)Aletheia Wrote: There are some other options, I forget how betabot does it, but I am pretty certain it does not do this. I also remember that Jack's channel(before it got removed) uninstalled a few av's if they had the silent uninstall option.
Like I said, I think I found a new (possibly not new, but new to me) method.
I'll analyse how BetaBot does it (I've got a bin) and update this thread.
* - tux1 - Sep 23, 2014
Pretty interesting, thanks for sharing.