.NET Avast detecting crypted server as MSIL

[.NET] Avast detecting crypted server as MSIL - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] Avast detecting crypted server as MSIL (/showthread.php?tid=5365733)

Avast detecting crypted server as MSIL - shutdownnow - Aug 6, 2016

I managed to make my crypter 5/35, how can I remove this "MSIL" detection of avast? What trigger it?
Scan results: nodistribute. com/result/7V5MxlgLb8SfHCnGjhN1OcYo

* - javdu10 - Aug 6, 2016

MSIL seems to be the runPe, try to change variable names of your RunPe or change the storage methode (I just read it somewhere that sometimes its the "storage method of the runPe" ) that get detected, but I have no idea how it work..

* - shutdownnow - Aug 6, 2016

(Aug 6, 2016 02:51 PM)javdu10 Wrote: MSIL seems to be the runPe, try to change variable names of your RunPe or change the storage methode (I just read it somewhere that sometimes its the "storage method of the runPe" ) that get detected, but I have no idea how it work..

Thanks, what would you do to change the storage way? Right now i do it with Resources

* - javdu10 - Aug 7, 2016

(Aug 6, 2016 05:19 PM)shutdownnow Wrote: Thanks, what would you do to change the storage way? Right now i do it with Resources

I don't even know at this time i'm trying to have a runPe working a crypter
but I need time to understand how it work 😭

* - _Devil - Aug 7, 2016

(Aug 6, 2016 05:19 PM)shutdownnow Wrote: Thanks, what would you do to change the storage way? Right now i do it with Resources

for .net file there is mainly 3 storage method from 1 is detected and for other you need to work out to get it FUD.
EOF storage (Detected)
Native Resource
Managed Resource (the one you use)

* - ScammerHD - Aug 7, 2016

Try to change the PE Headers, if you haven't done already. It's very strange for a Program to have a .exe in its resources, so it's often detected.

* - shutdownnow - Aug 8, 2016

(Aug 7, 2016 04:51 AM)_Devil Wrote: for .net file there is mainly 3 storage method from 1 is detected and for other you need to work out to get it FUD.
EOF storage (Detected)
Native Resource
Managed Resource (the one you use)

Thanks, but why is it than detected?

(Aug 7, 2016 03:45 PM)ScammerHD Wrote: Try to change the PE Headers, if you haven't done already. It's very strange for a Program to have a .exe in its resources, so it's often detected.

It isn't a exe, its a txt with AES encrypted exe in it

* - CoLDarkness - Aug 11, 2016

just comment out segmentations of your code one by one and scan again, you'll see what it detects.

* - shutdownnow - Aug 11, 2016

(Aug 11, 2016 01:34 AM)CoLDarkness Wrote: just comment out segmentations of your code one by one and scan again, you'll see what it detects.

Thanks