+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: Why is the %Temp% folder always empty after a reboot? (/showthread.php?tid=5959526)
Why is the %Temp% folder always empty after a reboot? - naxster - Apr 12, 2019
Hello guys!
I have never have this problem before, this is the first time actually :O
I'm trying to create a RAT using njRAT to make the RAT autostart when i reboot the computer.
In njRAT i have ticked "Copy" and the directory path is in %TEMP% option and "Copy to StartUp" and "Registry StartUp".
On my other laptops i've tried this it works great... Well kinda... I get like 1000 popups from Windows Defender, even though it's crypted, but as soon as i allow it, it works great.
But i'm trying on my desktop computer and i for some reason the %TEMP% folder is always empty when i reboot the computer...
I mean i can see the RAT in there its in folder "Temp/2/RATname.exe"... And i'm also connected to the RAT in njRAT, everything works great but as soon as i reboot the computer it's gone and i have to open the Server.exe again...
Do you guys know why this happens? I haven't had any problems before, this is the first time...
RE: Why is the %Temp% folder always empty after a reboot? - NERO - Apr 12, 2019
Windows defender or other anti-virus is deleting it on reboot.
Crypt your stub then try again.
RE: Why is the %Temp% folder always empty after a reboot? - naxster - Apr 12, 2019
(Apr 12, 2019 06:49 AM)DMT Wrote: Windows defender or other anti-virus is deleting it on reboot.
Crypt your stub then try again.
I only have Windows Defender on, but I have allowed it many times, I also made exception for the temp folder still nothing..
I don't actually need super good crypter since it's my own computer, but I won't Windows defender to remove it everytime I reboot it. With my 2 other laptops it's working great and they all have Windows 10 :/
RE: Why is the %Temp% folder always empty after a reboot? - NERO - Apr 12, 2019
Doesn't matter if allowed win defender will still delete it.
RE: Why is the %Temp% folder always empty after a reboot? - #Natasha - Apr 12, 2019
(Apr 12, 2019 09:45 AM)naxster Wrote: I only have Windows Defender on, but I have allowed it many times, I also made exception for the temp folder still nothing..
I don't actually need super good crypter since it's my own computer, but I won't Windows defender to remove it everytime I reboot it. With my 2 other laptops it's working great and they all have Windows 10 :/
Whitelist folder ...