+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C#] How do I bypass Trojan.TR/Dropper.Gen with runPE? (/showthread.php?tid=6065722)
How do I bypass Trojan.TR/Dropper.Gen with runPE? - ArcticSlay - Apr 11, 2020
I've currently got my crypter and program down to 3/26 using a refud of runPE and cannot bypass Trojan.TR/Dropper.Gen.
https://antiscan.me/scan/new/result?id=ma24fHL8xn1j
![[Image: ma24fHL8xn1j.png]](https://antiscan.me/images/result/ma24fHL8xn1j.png)
RE: How do I bypass Trojan.TR/Dropper.Gen with runPE? - Chameleon - Apr 11, 2020
it's so hard i remember back in the day web avira was the bastard that no one could bypass but these days it has seemed to have died down
RE: How do I bypass Trojan.TR/Dropper.Gen with runPE? - Cʀᴏᴡ - Apr 11, 2020
Hey, man at least you're bypassing Avast. That's a plus.
RE: How do I bypass Trojan.TR/Dropper.Gen with runPE? - ArcticSlay - Apr 11, 2020
(Apr 11, 2020 04:45 AM)TechaOG Wrote: Hey, man at least you're bypassing Avast. That's a plus.
True, I could look at the ups, just I thought I was doing well by changing the information and so on, but I cannot seem to add the registry startup properly in the injection either... But it sends past av's which is a plus.
RE: How do I bypass Trojan.TR/Dropper.Gen with runPE? - Cʀᴏᴡ - Apr 11, 2020
Yeah, i'm having trouble with the registry as well. It adds to the Current User but not into the "run" part.
But i know why that is, because my file does not get dropped on the disk it's going straight to memory so when the target executes it, i'll half to add it by hand.
Which sucks.
Wish i was friends with a programmer so i could get some help but when you ask for help anywhere on the internet you get yelled at hahaha.
I just look at other code and try to add it to my code the best way i can, but sometimes it does not work out cause i don't have enough arguments in the code.
RE: How do I bypass Trojan.TR/Dropper.Gen with runPE? - youlded - has1 - Apr 11, 2020
Most of those methods aren't going to be free, with that knowledge you can sell a crypter on here.
I have a method that will remove any scantime detection of your runPE, startup, & similar methods for 100$.
RE: How do I bypass Trojan.TR/Dropper.Gen with runPE? - VisualSoft - Apr 11, 2020
(Apr 11, 2020 04:45 AM)TechaOG Wrote: Hey, man at least you're bypassing Avast. That's a plus.
Avast is much easy to bypass then avira.
(Apr 11, 2020 06:47 AM)youlded - has1 Wrote: Most of those methods aren't going to be free, with that knowledge you can sell a crypter on here.
I have a method that will remove any scantime detection of your runPE, startup, & similar methods for 100$.
I agree with you my friend.
RE: How do I bypass Trojan.TR/Dropper.Gen with runPE? - Cʀᴏᴡ - Apr 11, 2020
(Apr 11, 2020 07:04 AM)VisualSoft Wrote: Avast is much easy to bypass then avira.
I agree with you my friend.
I kinda figured avast would be really hard to bypass haha but yet again i hardly know what i'm doing, but i am getting better.
I just need to learn some technique's. I'm scared to buy a crypter on here cause i got a lot of feed back, saying "crypters on HFs don't do much.
But that's just what i heard.
I love messing around with base64 strings. If i can figure out some new technique's i'll be good to go. I just need to learn a bit more.
It's just really hard learning on you're own cause you don't know where to start hahaha.
RE: How do I bypass Trojan.TR/Dropper.Gen with runPE? - NYANxCAT - Apr 11, 2020
(Apr 11, 2020 03:16 AM)ArcticSlay Wrote: I've currently got my crypter and program down to 3/26 using a refud of runPE and cannot bypass Trojan.TR/Dropper.Gen.
https://antiscan.me/scan/new/result?id=ma24fHL8xn1j
I don't think someone will give you free tutorial on how to refud or how to bypass specific av otherwise no one will sell private stubs or public crypter on HF....
post here Service Requests and you will get help within a day or two
RE: How do I bypass Trojan.TR/Dropper.Gen with runPE? - n0$f3ratu$ - Apr 11, 2020
(Apr 11, 2020 03:16 AM)ArcticSlay Wrote: ......
Are you positive that detection is from runpe?
Are you sure is not from Assembly.Load or resources?
RE: How do I bypass Trojan.TR/Dropper.Gen with runPE? - Redrum - Apr 11, 2020
You could try zipping the Binary in the res instead of just encrypting?
I've bypassed it before using passworded zip files to hold binary in res before
RE: How do I bypass Trojan.TR/Dropper.Gen with runPE? - ArcticSlay - Apr 11, 2020
(Apr 11, 2020 11:18 AM)˗ˏˋ NYAN CAT ˎˊ˗ Wrote: I don't think someone will give you free tutorial on how to refud or how to bypass specific av otherwise no one will sell private stubs or public crypter on HF....
post here Service Requests and you will get help within a day or two
Thanks, yeah I don't need help on the refud, just wondering basically what that antivirus detection was basically, so if I know what it is, I can find a way around it without exploiting people for free services.
(Apr 11, 2020 05:49 PM)Redrum Wrote: You could try zipping the Binary in the res instead of just encrypting?
I've bypassed it before using passworded zip files to hold binary in res before
Thank you for the feedback, I will try.
(Apr 11, 2020 12:21 PM)n0$f3ratu$ Wrote: Are you positive that detection is from runpe?
Are you sure is not from Assembly.Load or resources?
I am not to be honest. I'll check other ways around, ty.
(Apr 11, 2020 08:03 AM)TechaOG Wrote: I kinda figured avast would be really hard to bypass haha but yet again i hardly know what i'm doing, but i am getting better.
I just need to learn some technique's. I'm scared to buy a crypter on here cause i got a lot of feed back, saying "crypters on HFs don't do much.
But that's just what i heard.
I love messing around with base64 strings. If i can figure out some new technique's i'll be good to go. I just need to learn a bit more.
It's just really hard learning on you're own cause you don't know where to start hahaha.
I am a noob when it comes to that too man, it's a cool learning experience. HMU on discord for some ideas to share lol Arctic#3060
RE: How do I bypass Trojan.TR/Dropper.Gen with runPE? - zataeta - Apr 12, 2020
tell me in Dis,c-0rd -> Quebe$h#3858 and i can put it fud 100% for you
RE: How do I bypass Trojan.TR/Dropper.Gen with runPE? - finalexception - Apr 15, 2020
bro it says dropper, just stop droppin