Aug 14, 2009 05:34 AM
(This post was last modified: Dec 27, 2009 11:00 PM by Carb0n F1ber.)
This query has come up many times in this forum, "How to Crypt a Turkojan Server Successfully??". It is very easy to crypt the server with any free crypters available in this forum, but many face the trouble when the server automatically extracts 2 DLL files, which then gets detected in the victims computer.
Here is a tutorial to show you how to extract, crypt, and re-join the DLL's back into the Turkojans server.
1) First of all, you will need your "server" created by Turkojan. Make sure you do not pack your server with UPX i.e., uncheck the option that says "Pack Server Using UPX" (you can find this option at the bottom of your Server Editor).
2) Next you will need "PE Explorer", download the 30-day evaluation from http://www.heaventools.com/download-pe-explorer.htm
3) Open PE Explorer, and open the server file created by Turkojan
4) Click on View - Resources
5) Right click on the DENEME resource and select "Save Resource As". Make sure you save as .DLL file
6) Repeat the same step with resource named ROOTKIT
7) Now, use your own methods to crypt the 2 extracted .DLL files. I personally use "asprotect". You can download a free trial from http://www.aspack.com/downloads.aspx
Note: asprotect does not make your .DLL files 100% FUD. Just use random key protection, and you might get as lucky as 95% UD. Else, use your own methods.
Do let me know if you find any other tool to crypt .DLL files. Even I'm searching for one
8) Now that you have crypted both .DLL files, time to pack it back with the server
9) Download "Resource Hacker" from http://www.angusj.com/resourcehacker/
10) Make sure you close PE Explorer, and open the same server file with Resource Hacker
11) Right click DENEME resource and select "Replace Resource". Click on "Open file with new resource" and select the crypted DENEME.DLL file. Under "Resource Type" type RCDATA, under "Resource Name" type DENEME, leave "Resource Language" empty. Repeat the same with ROOTKIT, typing ROOTKIT as "Resource Name".
12) "Save" or "Save As" the new server.
13) Now you can crypt the server file separately again.
14) Ready to go..!!
Credits: To RDG for teaching me this... 😁
A simple thanks is always appreciated 🙂 ...
Here is a tutorial to show you how to extract, crypt, and re-join the DLL's back into the Turkojans server.
1) First of all, you will need your "server" created by Turkojan. Make sure you do not pack your server with UPX i.e., uncheck the option that says "Pack Server Using UPX" (you can find this option at the bottom of your Server Editor).
2) Next you will need "PE Explorer", download the 30-day evaluation from http://www.heaventools.com/download-pe-explorer.htm
3) Open PE Explorer, and open the server file created by Turkojan
4) Click on View - Resources
5) Right click on the DENEME resource and select "Save Resource As". Make sure you save as .DLL file
6) Repeat the same step with resource named ROOTKIT
7) Now, use your own methods to crypt the 2 extracted .DLL files. I personally use "asprotect". You can download a free trial from http://www.aspack.com/downloads.aspx
Note: asprotect does not make your .DLL files 100% FUD. Just use random key protection, and you might get as lucky as 95% UD. Else, use your own methods.
Do let me know if you find any other tool to crypt .DLL files. Even I'm searching for one
8) Now that you have crypted both .DLL files, time to pack it back with the server
9) Download "Resource Hacker" from http://www.angusj.com/resourcehacker/
10) Make sure you close PE Explorer, and open the same server file with Resource Hacker
11) Right click DENEME resource and select "Replace Resource". Click on "Open file with new resource" and select the crypted DENEME.DLL file. Under "Resource Type" type RCDATA, under "Resource Name" type DENEME, leave "Resource Language" empty. Repeat the same with ROOTKIT, typing ROOTKIT as "Resource Name".
12) "Save" or "Save As" the new server.
13) Now you can crypt the server file separately again.
14) Ready to go..!!
Credits: To RDG for teaching me this... 😁
A simple thanks is always appreciated 🙂 ...
