Hack Forums
[C#] how to bypass Trojan:Win32/Wacatac.D!ml - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C#] how to bypass Trojan:Win32/Wacatac.D!ml (/showthread.php?tid=6071235)

Pages: Pages 1 2


how to bypass Trojan:Win32/Wacatac.D!ml - notahackerman - Apr 25, 2020

hello guys, how to bypass this thing?

Trojan:Win32/Wacatac.D!ml

it's the result on scan on antiscan.me for Windows Defender..

some1 have an idea?


RE: how to bypass Trojan:Win32/Wacatac.D!ml - VisualSoft - Apr 25, 2020

Its simple, replace the code which is causing that detection.


RE: how to bypass Trojan:Win32/Wacatac.D!ml - notahackerman - Apr 25, 2020

(Apr 25, 2020 03:48 AM)VisualSoft Wrote:  Its simple, replace the code which is causing that detection.

yeah, ofc lmao you're mastermind, thank you help wtf..

should i replace with? lol


RE: how to bypass Trojan:Win32/Wacatac.D!ml - Shadow_Cloud - Apr 25, 2020

(Apr 25, 2020 07:49 AM)notahackerman Wrote:  yeah, ofc lmao you're mastermind, thank you help wtf..

should i replace with? lol

You really aren't giving us enough info. Do you even know which code is causing the detection? If you break this down to smallest possible form of which code flags the detection, we might be able to help. But without any idea of the code causing this, how should we know what to replace it with?


RE: how to bypass Trojan:Win32/Wacatac.D!ml - VisualSoft - Apr 25, 2020

(Apr 25, 2020 07:49 AM)notahackerman Wrote:  yeah, ofc lmao you're mastermind, thank you help wtf..

should i replace with? lol

What should you replace?
Untill and unless we dont have the code you used Only GOD Can tell what to replace 👍


RE: how to bypass Trojan:Win32/Wacatac.D!ml - notahackerman - Apr 25, 2020

(Apr 25, 2020 08:36 AM)Shadow_Cloud Wrote:  You really aren't giving us enough info.  Do you even know which code is causing the detection?  If you break this down to smallest possible form of which code flags the detection, we might be able to help.  But without any idea of the code causing this, how should we know what to replace it with?

(Apr 25, 2020 09:15 AM)VisualSoft Wrote:  What should you replace?
Untill and unless we dont have the code you used Only GOD Can tell what to replace 👍

i'm using this one, https://github.com/NYAN-x-CAT/Bitcoin-Grabber/blob/master/Bitcoin-Grabber/Program.cs

thx nyan cat

what should i replace to avoid that detection guys?


RE: how to bypass Trojan:Win32/Wacatac.D!ml - Shadow_Cloud - Apr 25, 2020

(Apr 25, 2020 10:28 AM)notahackerman Wrote:  i'm using this one, https://github.com/NYAN-x-CAT/Bitcoin-Grabber/blob/master/Bitcoin-Grabber/Program.cs

thx nyan cat

what should i replace to avoid that detection guys?

Can you tell us which part is being detected?


RE: how to bypass Trojan:Win32/Wacatac.D!ml - notahackerman - Apr 25, 2020

(Apr 25, 2020 10:57 AM)Shadow_Cloud Wrote:  Can you tell us which part is being detected?

how could i find out?

it's the whole source and if you google the Wacatac meaning it's something like:
https://malwarefixes.com/threats/trojanwin32-wacatac-dml/


RE: how to bypass Trojan:Win32/Wacatac.D!ml - Shadow_Cloud - Apr 25, 2020

(Apr 25, 2020 11:50 AM)notahackerman Wrote:  how could i find out?

it's the whole source and if you google the Wacatac meaning it's something like:
https://malwarefixes.com/threats/trojanwin32-wacatac-dml/

Typically you can narrow this down to a file/class based on the description of the detection. But we don't have your code, its going to be very hard for us to divine this.


RE: how to bypass Trojan:Win32/Wacatac.D!ml - notahackerman - Apr 25, 2020

(Apr 25, 2020 11:52 AM)Shadow_Cloud Wrote:  Typically you can narrow this down to a file/class based on the description of the detection.  But we don't have your code, its going to be very hard for us to divine this.

nevermind, the confuserEx made it, thank you anyway


RE: how to bypass Trojan:Win32/Wacatac.D!ml - VisualSoft - Apr 25, 2020

In case you are using that Rat, I would suggest you to use a Crypter,
In case you plan to use that particular Feature, then I suggest you to Comment functions of that project and see at which point the detection goes.


(Apr 25, 2020 12:00 PM)notahackerman Wrote:  nevermind, the confuserEx made it, thank you anyway

It wont be for long, SO I would suggest you to find some other option to FUD.


RE: how to bypass Trojan:Win32/Wacatac.D!ml - __Digital__ - Apr 25, 2020

(Apr 25, 2020 11:50 AM)notahackerman Wrote:  how could i find out?

it's the whole source and if you google the Wacatac meaning it's something like:
https://malwarefixes.com/threats/trojanwin32-wacatac-dml/

You sir are retarded, its called comment out the code piece by piece until its undetected. thats how you figure out whats getting flagged. it is not rocket science to figure it out.

confuserex is not always needed, learn to protect your code in other ways


RE: how to bypass Trojan:Win32/Wacatac.D!ml - notahackerman - Apr 25, 2020

(Apr 25, 2020 12:47 PM)__Digital__ Wrote:  You sir are retarded, its called comment out the code piece by piece until its undetected. thats how you figure out whats getting flagged. it is not rocket science to figure it out.

confuserex is not always needed, learn to protect your code in other ways

anyway, the problem is fixed, some junk codes added and stop using confuserx and WD is bypassed...
but on ILSPY i still can see my source, what should i do 😒


(Apr 25, 2020 12:47 PM)__Digital__ Wrote:  You sir are retarded, its called comment out the code piece by piece until its undetected. thats how you figure out whats getting flagged. it is not rocket science to figure it out.

confuserex is not always needed, learn to protect your code in other ways

maybe Dotfuscator is more good or NETreactor? i have to protect the code 😎


RE: how to bypass Trojan:Win32/Wacatac.D!ml - Accord - Apr 25, 2020

(Apr 25, 2020 01:00 PM)notahackerman Wrote:  anyway, the problem is fixed, some junk codes added and stop using confuserx and WD is bypassed...
but on ILSPY i still can see my source, what should i do 😒



maybe Dotfuscator is more good or NETreactor? i have to protect the code 😎

Use netguard, theyre offering excellent service for cheaper price.


RE: how to bypass Trojan:Win32/Wacatac.D!ml - notahackerman - Apr 26, 2020

(Apr 25, 2020 08:59 PM)Accord Wrote:  Use netguard, theyre offering excellent service for cheaper price.

i'm using code dom as builder to compile the source from source.cs

if i'll buy netguard and then crypt the builder, the source compiled will be crypted too or?