Hack Forums
[.NET] Making my VB6 code undetected - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] Making my VB6 code undetected (/showthread.php?tid=5255819)



Making my VB6 code undetected - edurne - May 1, 2016

Hi,

I want to make my VB6 application UD.

Can you give me advice on how to change the code? Is there a programm that helps in changing the strings and/or functions. What is important?

Thanks in advance for help.

Regards
Edurne


* - Zilog80 - May 2, 2016

Try move .NET ASAP.
VB6 is from Jurassic era.


* - KrypteX - May 2, 2016

There's a ton of different ways that you can go about undetecting your source code, but Zilog is right. If you're going to be coding you might as well be coding in a more modern language.
If you're deadset on using VB6 I'd recommend commenting out parts of your source code until you figure out which lines are giving you detections and then rewrite them differently to accomplish the same thing.

You can also randomize your strings and functions to see if they're less detected that way.

Here in this example I'm using codedom to replace all of the strings inside "Φ" quotes with a randomly generated string.

(It's not letting me post here so here's a pastebin)
http://pastebin.com/sK45SFm0

You can also have some of your functions be inside of a DLL or if you're using functions or methods that are completely detected anyway then you'd need to invoke an encrypted binary containing those functions that you can add to your project as a resource.

Not sure if this is making any sense, I'm pretty new to this as well but I can help with what I can.


* - SIM-2263652 - May 2, 2016

Just move over to .net, vb6 is ancient. But yeah commenting out parts is a one manual way. If you post the source code we could see what may cause the detection.