+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: What options do I have to scan files (scantime and runtime) do not distribute? (/showthread.php?tid=6062555)
What options do I have to scan files (scantime and runtime) do not distribute? - Jordi - Apr 2, 2020
I'm trying make my file FUD with a crypter I bought here, but I test it at my old computer and file is deleted by windows defender.
What is a good scanner for runtime and scantime? Or should I test it myself in a virtual machine with the most common antivirus installed?
run4me.net
kleenscan.com
CyberScan.org
RE: What options do I have to scan files (scantime and runtime) do not distribute? - Cendrix - Apr 2, 2020
You can also scan at antiscan.me (not sure about Runtime tho?)
Also the crypter you got probably uses a shared stub and is currently not FUD.
When you scan/run your file on your system, also make sure to disable sample submission in your AVs first or it might distribute samples
RE: What options do I have to scan files (scantime and runtime) do not distribute? - Jordi - Apr 2, 2020
I think it is FUD... only 1 detection at cyberscan.org and 4 detections at kleescan.org.
I did not test with run4me.net because is necessary to pay. Cyberscan.org has 1 free scan/day and kleenscan.org is free for registered users.
But windows defender deletes the file when I click on it. Probably Cyberscan.org and Kleenscan.org only scan for scantime, not runtime.
RE: What options do I have to scan files (scantime and runtime) do not distribute? - Cendrix - Apr 2, 2020
I'm not sure if you understand what FUD means.... it means Fully Undetectable, which means 0/32 results 0% detection everywhere.
1/32 can be considered just UD already, not to mention 4+ detections.
If Windows Defender detected your file, it is definitelly not FUD, more like UD and detected by specific AVs.
Also, WD is considered a pretty crappy AV. If WD detects it, I can't even imagine how easily ESET / Avira / Bitdefender / Kaspersky / Avast / AVG is gonna detect it aswell.
RE: What options do I have to scan files (scantime and runtime) do not distribute? - Jordi - Apr 2, 2020
(Apr 2, 2020 06:46 AM)Jordi Wrote: I think it is FUD... only 1 detection at cyberscan.org and 4 detections at kleescan.org.
I did not test with run4me.net because is necessary to pay. Cyberscan.org has 1 free scan/day and kleenscan.org is free for registered users.
But windows defender deletes the file when I click on it. Probably Cyberscan.org and Kleenscan.org only scan for scantime, not runtime.
Thanks! Now I understand better what FUD means. 90% FUD is not FUD, specially if detected by windows defender.