(May 18, 2011 08:05 AM)Arya Stark™ Wrote: Umm, Guys You Have To Try All Three Steps To make It Undectatable !
Yeah that is correct.
Thanks for your help.
[Tutorial]How to make your Server.exe FuD [NO Crypter Needed!] |
|
Yeah that is correct. Thanks for your help. 
So. Here is what i did. I used a stub that was completely FUD.
Quote:File Info I had 1 detection after crypting for some reason. So i followed your method. And this is what i got. Quote:File Info I Dont get it. Unless that's it. I've been dealing with 1/6 detections but it gets annoying. (May 18, 2011 05:13 PM)Rukkas Wrote: So. Here is what i did. I used a stub that was completely FUD. Hey mate! To get rid of Avira, your stub needs a bigger sized icon [350KB - 500KB HD ICON] and it will remove the Avira. ;) Hope that helped, also consider adding some junk code to the stub. (May 18, 2011 05:17 PM)xSkid Wrote: Hey mate! I Will definitely try this. Ill post back in a few minutes. Again with before and after effects. (May 18, 2011 05:21 PM)Rukkas Wrote: I Will definitely try this. Ill post back in a few minutes. Again with before and after effects. Alright ;) Also if you need a junk-code generator, On my first Post, there is a tool called "Assembly Changer" , download that & it will have a junk-code generator. ;) Also, the basic stuff.. 1) Try to change some strings on your Stub. [I have another thread on this...] [Strings Normally Start with DIM Crypt As etc...] 2) Change the Icon to a HD Icon 3) Use a cracked tool to Obfuscate the program. (May 18, 2011 05:33 PM)Rukkas Wrote: I cant find any Icons that are bigger then 93kb. My stub is fine. Ive scanned it. it doesn't get detected. When i crypt my server, is when the detection arises. I'm still looking for icons to use, and see if it bypasses avira. Ok, lol. i will need to write-up a smaller Tutorial right here on the stop for you.. so let me start.. ;) NOTE: Please get a fresh stub, that has not been obfuscated or anything, no extra-additions, no assembly change, nothing a clean stub that is detected, we are going to be RE-FUDING it. And yes.. i just made this for you.. right now... Step 1 1) Download The Following http://www.mediafire.com/?6jqqzronzgw55oa 2) Extract the Program and start it, when the program starts you will see 3 tabs on the top, select "Assembly Changer", You are now into a new form. 3) Now on the top click "open" and select your Stub that is NOT FuD. 4) Put "Hijack This 2007" into ALL of the forms/textbox's, when you get down to "product version" tap on the Yellow Thing next to the Textbox a few times, do the same for the next one, "file version" 5) Now Download THIS icon, and select the "open" at the last textbox. SIZE ICON: 361KB DOWNLOAD: http://www.mediafire.com/?3jk883synuxdzdl 6) Find where you saved the Icon, and select it. 7) Click "Save Info" DONE.. Step 2 1) Download This Cracked Tool. DOWNLOAD: http://www.mediafire.com/?ixcnvod586dxt6s 2) Open the tool, in the top tab, select "Application" 3) Click "Add" 4) And select your Stub that we have just added a icon too and changed the assembly. 5) In the Dropbox Below, where it says "Preset" , select "Null" , PLEASE DO NOT SELECT ANYTHING ELSE. 6) Then Click "Xenocode Application". Done. ;) Enjoy...
May 18, 2011 06:38 PM
(This post was last modified: May 18, 2011 06:52 PM by Rukkas.)
Okay so I've followed everything completely. Tried it numerous times, with different files. still getting this output.
Quote:File Info Even with using your icon. I'm not understanding. Haha. Well ill just live with 1/6 i guess. Still comes up detected. 1/6 by Avira. Even if i use your icon, and follow all the steps. I don't know. I'll just live with 1/6 detected. =) thanks for all your help.   |
|
|
