+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: [Anti AV Showcase] Why crypt when you can Uninstall? (/showthread.php?tid=5878369)
[Anti AV Showcase] Why crypt when you can Uninstall? - Jacque Fresco - Aug 26, 2018
This is the showcase of a Tool that i write with which it is possible to Uninstall Antivirus Software.
imagine that you have freshly cryted a RAT (all paid) but you already know
that the FUD/UD status will not hold very long and that you then need to pay for another crypter.
But why pay for crypting services when they arent able to make your Stub Fully UD for a long time?
this is where my Project comes in.
It is no longer needed to crypt your stubs when you can uninstall the AV remotly ^^
Currently it is possible to Uninstall Avast, Avira and Comodo.
Id like to see what you guys think about this Tool and if you think that this is something that should be completed.
The Videos are taken on different stages of the Tool, therefore the Uninstall Process is different between the Versions.
All the AV's are non modified and complety updated.
Avast Uninstall
Avira Uninstall
Note: Uninstalling Avira did take more Steps until Completion, therefore this Video is longer.
Comodo Uninstall
RE: [Anti AV Showcase] Why crypt when you can Uninstall? - Jacque Fresco - Aug 27, 2018
bump Please give some feedback, this would help
RE: [Anti AV Showcase] Why crypt when you can Uninstall? - C0mpl3Xity - Aug 28, 2018
hey mate, whats the difference between your tool and the avast removal tool
RE: [Anti AV Showcase] Why crypt when you can Uninstall? - vaxton - Aug 28, 2018
is this silent uninstall? if yes, this will worth a lot of money if you invest all your power in.
RE: [Anti AV Showcase] Why crypt when you can Uninstall? - Jacque Fresco - Aug 28, 2018
(Aug 28, 2018 12:22 PM)vaxton Wrote: is this silent uninstall? if yes, this will worth a lot of money if you invest all your power in.
Thanks i was waiting for such words, now i can procede.
it does absolutly depend on who is sitting in front of the computer. If its a technic guy then he will probably see that something is happening, on some AV's it needs more steps to complete, e.g. driver uninstalling, making the AV useless so that further steps cant be blocked. To the Silent part: Therefore i try to find similar windows internal processes, so that it looks similiar to the user when things happening that are unusual e.g. message boxes, requiered restarts and so on.
i already think about a function that does steal the icon from the AV tray executable and add it to a useless binary that then will show up in the tray after the uninstalling is finished. I know some people that judg to be safe because there is the AV icon in the tray.
(Aug 28, 2018 12:18 PM)C0mpl3Xity Wrote: hey mate, whats the difference between your tool and the avast removal tool
Sorry what Avast removal tool do you mean? the offical uninstaller tool? If yes then the main difference is that the tool i code is not providing any "what is really happening" GUI. So its a tool for Silent Uninstalling, or if your AV just bugs around and dont want to leave from your OS.
RE: [Anti AV Showcase] Why crypt when you can Uninstall? - vaxton - Aug 28, 2018
ok for now this is extremely clever idea, is the silent uninstaller fud already?
RE: [Anti AV Showcase] Why crypt when you can Uninstall? - Jacque Fresco - Aug 28, 2018
(Aug 28, 2018 01:42 PM)vaxton Wrote: ok for now this is extremely clever idea, is the silent uninstaller fud already?
It is on that point of development FUD, that depends on how hard the AV developers are working on their heuristics. If you ask me about malware then i would answer, based on Antivirus software, that these programs also take safety measures like malware does. i would say this is a Anti Anti Virus Tool ^^