(Sep 20, 2025 05:16 AM)DramaKing Wrote:  Or downloaded too many times.

(Sep 21, 2025 12:18 AM)ServersFxcked Wrote:  But you say that like the people that get sent it wont upload it

(Sep 21, 2025 06:43 AM)skyt__ Wrote:  Honestly, if people are that adamant about uploading it I dont fucking care just upload it I guess ✌

(Sep 22, 2025 10:14 AM)MadScientist Wrote:  Even end users may upload it, I upload anything I download off the web (aside from things I know and trust/some tools) to VT before I run it.

(Sep 19, 2025 08:28 PM)webdev77 Wrote:  In today's modern world with AV tools relying upon cloud-based data sharing and sampling, I think virustotal is the least of your concerns. In any case, happy developing on your journey.

(Sep 25, 2025 10:39 AM)nodes Wrote:  This is the thing people aren't understanding fully...

It does not matter what you do in userland, frontend, install process, runtime, etc...

You can detect patterns in kernel, minifilter, etc and flag susp activity.

If it doesn't have a cert, it's getting scanned regardless.
If it does have a cert and that cert is new, it's getting scanned

AAAAAAAND if it has a "trusted" cert, it's still getting scanned for a good bit anyways.
and if that trusted, certified program has any ability to run other programs/files, or sideloading access.... it's getting scanned every time.

This isn't always 100% true for every single AV, but it's pretty true.

They don't need sigs, static analysis, etc

If someone's shooting you, do you look to see if they're holding a gun, or do you look down at the bullet hole in your stomach?
Kernel monitoring is the bullet hole, they don't care how you get your prog started / in runtime.

Of course, methods always exist... But the idea of "forever FUD" is silly.... In .NET too

And lastly, even if you do achieve FUD reliably, you still need to get through MOTW, SmartScreen, etc.

So lets say you do that... It only takes 1 user with good security to flag & auto-upload your prog for analysis.

----
If you can build a FUD crypter, you can do a lot more.
Look into whitehat embedded systems, encryption work, protected runtimes, and more - hell, you could even think about going into cybersecurity / defense.

That's ultimately my advice to any crypter dev. If you can crypt, you can do a lot more with your life.
Don't limit yourself

(Sep 25, 2025 01:37 PM)skyt__ Wrote:  Thank you very much for all the info! Fyi it does bypass smart screen, windows defender, etc and isnt detected by any antivirus so far. Quite frankly, I wouldnt even call it a crypter. It's purely like some sort of a bypass. Extremely little coding necessary took me around ≈200-300 lines. So please don't give me too much credit as my friend gave me the initial like part of the "method" but I transformed it into being accessible for .NET assemblies🙃. "Forever Fud" is just a name btw I thought it was catchy. I appreciate your support.