Hack Forums
[C#] Detect If Rat User Upload Client Virus total - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C#] Detect If Rat User Upload Client Virus total (/showthread.php?tid=5149804)



Detect If Rat User Upload Client Virus total - zuobi1154 - Jan 27, 2016

using browser cookie ?
any one help me ?


* - Odus - Jan 27, 2016

There was a thread recently that talked about this, apparently you can check something in the system environment for 'malwr_sample' or something and exit if you spot it. How well it works, I can't say.


* - Rhez - Jan 27, 2016

I think you can't do that thing?
But you can prevent it by blocking that website.


* - xxleonderpxx - Jan 28, 2016

(Jan 27, 2016 10:18 PM)Rhez Wrote:  I think you can't do that thing?
But you can prevent it by blocking that website.

You would probably want to explicitly state that your program was doing this and why, otherwise it may cause the user to freak out a bit.


* - Renderon - Jan 31, 2016

You can make your stub, check your own signature md5 or sha, and check on the web if someone has uploaded a sample.


* - ๖ۣۜAnubis - Feb 2, 2016

Modify the hosts file to redirect virustotal.com to other IP. This way, user can't connect to virustotal.


* - Magna imperium - Feb 2, 2016

(Feb 2, 2016 06:14 AM)๖ۣۜAnubis Wrote:  Modify the hosts file to redirect virustotal.com to other IP. This way, user can't connect to virustotal.

This is, but might need admin rights tho.


* - ๖ۣۜAnubis - Feb 2, 2016

(Feb 2, 2016 09:50 AM)Neva Wrote:  This is, but might need admin rights tho.

Privilege Escalation is easy. Just add it.