+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C#] AVG/AVAST Detection Issue. CSHARP (/showthread.php?tid=5923660)
AVG/AVAST Detection Issue. CSHARP - _CASP3R_ - Dec 28, 2018
Hello, So basically i am getting a detection, After some digging i found out what is getting detected. Its this peace of code below.
How do i get around this detection? I have tried renaming the value and that didn't do anything. I have also tried copying the file to the startup folder.... Same detection. Any help is appreciated.
Code
using (RegistryKey key = Registry.CurrentUser.OpenSubKey("SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", true))
{
key.SetValue("conhost", "\"" + tempPath + text + "\"");
}Best Regards, CASPER 🤝 🤝
RE: AVG/AVAST Detection Issue. CSHARP - Nick (Name) - Dec 28, 2018
You should try another form of startup, there’s plenty of other methods out there but using the registry is probably not the best idea. If you’re not code signing, AV’s are going to flag any 32bit executable attempting to write in this extremely common startup location.
RE: AVG/AVAST Detection Issue. CSHARP - NYANxCAT - Dec 28, 2018
Try this
https://www.andreafortuna.org/dfir/malware-persistence-techniques/
RE: AVG/AVAST Detection Issue. CSHARP - _CASP3R_ - Dec 29, 2018
(Dec 28, 2018 08:51 PM)Nick (Name) Wrote: You should try another form of startup, there’s plenty of other methods out there but using the registry is probably not the best idea. If you’re not code signing, AV’s are going to flag any 32bit executable attempting to write in this extremely common startup location.
Dont u need a certificate to code sign? Im pretty sure some crypters have them but i dont wanna crypt my file.
(Dec 28, 2018 10:01 PM)˗ˏˋ NYAN CAT ˎˊ˗ Wrote: Try this
https://www.andreafortuna.org/dfir/malware-persistence-techniques/
Thanks man! Ill check it out.
RE: AVG/AVAST Detection Issue. CSHARP - NYANxCAT - Jan 2, 2019
n.p man, I'm glad it helped