[Vysse]

Looks like you got your work cut out for ya Vyssee. :P

Na look at my scan its just some random false positive that shows up sometimes but not others...

---

Vysse, are you getting runtime FUD with Blackshades ?

Yes those who have tested it have had no issue with this :D

[TheBROCode]

tbh i have to vouche for Vysse i had no problems with the crypter or him and the detections are 0/33 for a few days already these are my servers atm:
the one i made on when i bought the crypter:
http://my-avscan.com/result.php?scan=Mzk4NzM=

And the one i crypted just 2 seconds ago:
http://my-avscan.com/result.php?scan=Mzk4NzI=

Its crypted with Blackshades

[Stenography]

looks nice crypter ..
But i don't think its worth 65$, its doesn't has alot of features and as i understanded from the poll,
It got serious bugs.

[Donaldwc]

tbh i have to vouche for Vysse i had no problems with the crypter or him and the detections are 0/33 for a few days already these are my servers atm:
the one i made on when i bought the crypter:
http://my-avscan.com/result.php?scan=Mzk4NzM=

And the one i crypted just 2 seconds ago:
http://my-avscan.com/result.php?scan=Mzk4NzI=

Its crypted with Blackshades

Settings?
My black shades is 2/33 when I crypt it.

[Eminent Fate]

I am rather interested in this. I might forget to check the response you may give me so feel free to PM it to me, I am just wondering how FUD this crypter really is?. Is it truly FUD from kaspersky, Avast, AVG or is it just FUD from scan sites which uses older engines?.

[deezjee19]

Unfortunately also I must report that it's being detected.
Scanning on NVT results into 1/6.. Tho it's now often being detected upon opening it.

Vysse> Please update.. :-)
You mentioned something about small files being detected.. Please include a file pumper specify 'small'..
I'm pretty pleased with 6½", but my ex gf still found it small so yea..

[wenaffiliate]

interesting to buy a life time,can u PM me wil u offer a video tutrial?

[testtest789]

http://my-avscan.com/result.php?scan=NDAwODQ=

avira detect

[Charon0831]

I bought this crypter last night (well, really early this morning) and I told Vysse that if it worked like he said I would give him a vouch. Here are the results. (Warning, there are some larger images in this)

My Blackshades settings:
Spoiler (Click to View)[IMG]http://i56.[censored].com/1oov8o.jpg[/IMG]
Note: these are the default .net settings for Blackshades.

My Vcrypt settings:
Spoiler (Click to View)[IMG]http://i51.[censored].com/20v10l0.jpg[/IMG]
Note: Use Vcrypt to add to startup, NOT Blackshades.

Crypted with those settings. Here are the scan results:
NVT
Spoiler (Click to View)File Info

Report date: 2011-05-16 09:10:19 (GMT 1)
File name: vcrypt-exe
File size: 651264 bytes
MD5 Hash: 70457a2b07e24ae4023808e960af0e3f
SHA1 Hash: 0f63e8ff372bf2aa24351de0eb6ddb06f9ecb5cb
Detection rate: 0 on 6 (0%)
Status: CLEAN

Detections

AVG -
Avira AntiVir -
ClamAV -
Emsisoft -
TrendMicro -
Zoner -

Scan report generated by
NoVirusThanks.org

Scan4you:
Spoiler (Click to View) Scan Results: 0/33
AVG Free - OK
ArcaVir - OK
Avast 5 - OK
Avast - OK
AntiVir (Avira) - OK
BitDefender - OK
VirusBuster Internet Security - OK
Clam Antivirus - OK
COMODO Internet Security - OK
Dr.Web - OK
eTrust-Vet - OK
F-PROT Antivirus - OK
F-Secure Internet Security - OK
G Data - OK
IKARUS Security - OK
Kaspersky Antivirus - OK
McAfee - OK
MS Security Essentials - OK
ESET NOD32 - OK
Norman - OK
Norton Antivirus - OK
Panda Security - OK
A-Squared - OK
Quick Heal Antivirus - OK
Rising Antivirus - OK
Solo Antivirus - OK
Sophos - OK
Trend Micro Internet Security - OK
VBA32 Antivirus - OK
Vexira Antivirus - OK
Webroot Internet Security - OK
Zoner AntiVirus - OK
AhnLab V3 Internet Security - OK

Descry Scanner ( Online Crypter's custom scan engine - surpasses Scan4you IMHO)
Spoiler (Click to View) Scan Results: 0/29
A-Squared (Windows) - OK
Avast 4 (Linux) - OK
Avast 5 (Windows) - OK
AVG (Linux) - OK
AVG 2011 (Windows) - OK
Avira (Windows) - OK
BitDefender (Linux) - OK
ClamAV (Linux) - OK
ClamWin (Windows) - OK
Dr. Web (Windows) - OK
F-PROT (Linux) - OK
G Data (Windows) - OK
IKARUS (Windows) - OK
Kaspersky (Linux) - OK
Kaspersky 2011 (Windows) - OK
McAfee (Windows) - OK
Microsoft Security Essentials - OK
NOD32 (Windows) - OK
Panda (Linux) - OK
Panda (Windows) - OK
Sophos (Linux) - OK
TrendMicro (Windows) - OK
VBA32 (Linux) - OK
VBA32 (Windows) - OK
Vexira (Linux) - OK
VirusBuster (Linux) - OK
VirusBuster (Windows) - OK
Zoner Antivirus (Linux) - OK
Zoner Antivirus (Windows) - OK

Scan Results provided by OnlineCrypter [url=]http://www.onlinecrypter.com/descry_scan_results.php?id=4449[/url]

I then took my crypted server and tested it in a couple of different environments. One is in a Vmware sandbox, with Spyware Dr with Antivirus installed, also have a snapshot that has regular Spyware Dr and AVG antivirus installed. The other is an older laptop that I use just to test things out with. It has Nod32 and Trend Micro installed, which I take turns disabling to be able to test against both.

My Blackshades running with both bots installed:
Spoiler (Click to View)[IMG]http://i51.[censored].com/zvsv3t.jpg[/IMG]

Running processes on the laptop. Note that the server is running along with Nod32
Spoiler (Click to View)[IMG]http://i52.[censored].com/zsjvxi.jpg[/IMG]

The Nod32 scan with the server running:
Spoiler (Click to View)[IMG]http://i51.[censored].com/b7xteo.jpg[/IMG]

The same happened with Trend Micro. Neither detected the server while it was being loaded on the machine or when it was ran.

On the Vmware machine, It was the same for AVG. It did not detect scantime or runtime, or during a scan while the server was running. Spyware Dr with antivirus didn't detect it scantime, but when it was activated threw up a warning and a "blocked" message The interesting thing is that while it showed it as blocked, the server still installed and ran, and Spyware Dr didn't pick it up in the ensuing scan. So, it was only at the moment of injection that it was detected, but was not able to be stopped.
In this image is the server running with Spyware Dr.

Spoiler (Click to View)[IMG]http://i53.[censored].com/29nf2us.jpg[/IMG]

For those of you that may not know, Spyware Dr with AV, when kept updated, is EXTREMELY hard to fool. But again, the interesting thing is it failed to STOP the server, even though it said it did. Worst case scenario I can live with that, because if it doesn't catch it until it's injecting, and it says it blocks it but doesn't, then fails to see it on a scan afterward, then the only downside would be that whoever I sent it to would not trust me as a file source.

All this was my very first crypt with Vcrypt. I would have done more, but it was like 4:30 am and I was beat.

I have to give this product a vouch. Upon payment, I was up and running in 5 minutes. I got pretty good results so far.I am going to play with my settings a bit today, and test against more AVs.
When I have more results I will post back with my settings.

[VIRUZ™]

what is the output size if i have a file thats 50kb

[Vysse]

what is the output size if i have a file thats 50kb

it would be a bit large since I carry my runpe and other files to inject to with it.

[VIRUZ™]

it would be a bit large since I carry my runpe and other files to inject to with it.

can i have an average size please 🤝

[Vysse]

can i have an average size please 🤝

Well I would say about 300/350kb is added. I am trying to find a way to reduce image size however this would require more risks of being detected.

---

I bought this crypter last night (well, really early this morning) and I told Vysse that if it worked like he said I would give him a vouch. Here are the results. (Warning, there are some larger images in this)

My Blackshades settings:
Spoiler (Click to View)[IMG]http://i56.[censored].com/1oov8o.jpg[/IMG]
Note: these are the default .net settings for Blackshades.

My Vcrypt settings:
Spoiler (Click to View)[IMG]http://i51.[censored].com/20v10l0.jpg[/IMG]
Note: Use Vcrypt to add to startup, NOT Blackshades.

Crypted with those settings. Here are the scan results:
NVT
Spoiler (Click to View)File Info

Report date: 2011-05-16 09:10:19 (GMT 1)
File name: vcrypt-exe
File size: 651264 bytes
MD5 Hash: 70457a2b07e24ae4023808e960af0e3f
SHA1 Hash: 0f63e8ff372bf2aa24351de0eb6ddb06f9ecb5cb
Detection rate: 0 on 6 (0%)
Status: CLEAN

Detections

AVG -
Avira AntiVir -
ClamAV -
Emsisoft -
TrendMicro -
Zoner -

Scan report generated by
NoVirusThanks.org

Scan4you:
Spoiler (Click to View) Scan Results: 0/33
AVG Free - OK
ArcaVir - OK
Avast 5 - OK
Avast - OK
AntiVir (Avira) - OK
BitDefender - OK
VirusBuster Internet Security - OK
Clam Antivirus - OK
COMODO Internet Security - OK
Dr.Web - OK
eTrust-Vet - OK
F-PROT Antivirus - OK
F-Secure Internet Security - OK
G Data - OK
IKARUS Security - OK
Kaspersky Antivirus - OK
McAfee - OK
MS Security Essentials - OK
ESET NOD32 - OK
Norman - OK
Norton Antivirus - OK
Panda Security - OK
A-Squared - OK
Quick Heal Antivirus - OK
Rising Antivirus - OK
Solo Antivirus - OK
Sophos - OK
Trend Micro Internet Security - OK
VBA32 Antivirus - OK
Vexira Antivirus - OK
Webroot Internet Security - OK
Zoner AntiVirus - OK
AhnLab V3 Internet Security - OK

Descry Scanner ( Online Crypter's custom scan engine - surpasses Scan4you IMHO)
Spoiler (Click to View) Scan Results: 0/29
A-Squared (Windows) - OK
Avast 4 (Linux) - OK
Avast 5 (Windows) - OK
AVG (Linux) - OK
AVG 2011 (Windows) - OK
Avira (Windows) - OK
BitDefender (Linux) - OK
ClamAV (Linux) - OK
ClamWin (Windows) - OK
Dr. Web (Windows) - OK
F-PROT (Linux) - OK
G Data (Windows) - OK
IKARUS (Windows) - OK
Kaspersky (Linux) - OK
Kaspersky 2011 (Windows) - OK
McAfee (Windows) - OK
Microsoft Security Essentials - OK
NOD32 (Windows) - OK
Panda (Linux) - OK
Panda (Windows) - OK
Sophos (Linux) - OK
TrendMicro (Windows) - OK
VBA32 (Linux) - OK
VBA32 (Windows) - OK
Vexira (Linux) - OK
VirusBuster (Linux) - OK
VirusBuster (Windows) - OK
Zoner Antivirus (Linux) - OK
Zoner Antivirus (Windows) - OK

Scan Results provided by OnlineCrypter [url=]http://www.onlinecrypter.com/descry_scan_results.php?id=4449[/url]

I then took my crypted server and tested it in a couple of different environments. One is in a Vmware sandbox, with Spyware Dr with Antivirus installed, also have a snapshot that has regular Spyware Dr and AVG antivirus installed. The other is an older laptop that I use just to test things out with. It has Nod32 and Trend Micro installed, which I take turns disabling to be able to test against both.

My Blackshades running with both bots installed:
Spoiler (Click to View)[IMG]http://i51.[censored].com/zvsv3t.jpg[/IMG]

Running processes on the laptop. Note that the server is running along with Nod32
Spoiler (Click to View)[IMG]http://i52.[censored].com/zsjvxi.jpg[/IMG]

The Nod32 scan with the server running:
Spoiler (Click to View)[IMG]http://i51.[censored].com/b7xteo.jpg[/IMG]

The same happened with Trend Micro. Neither detected the server while it was being loaded on the machine or when it was ran.

On the Vmware machine, It was the same for AVG. It did not detect scantime or runtime, or during a scan while the server was running. Spyware Dr with antivirus didn't detect it scantime, but when it was activated threw up a warning and a "blocked" message The interesting thing is that while it showed it as blocked, the server still installed and ran, and Spyware Dr didn't pick it up in the ensuing scan. So, it was only at the moment of injection that it was detected, but was not able to be stopped.
In this image is the server running with Spyware Dr.

Spoiler (Click to View)[IMG]http://i53.[censored].com/29nf2us.jpg[/IMG]

For those of you that may not know, Spyware Dr with AV, when kept updated, is EXTREMELY hard to fool. But again, the interesting thing is it failed to STOP the server, even though it said it did. Worst case scenario I can live with that, because if it doesn't catch it until it's injecting, and it says it blocks it but doesn't, then fails to see it on a scan afterward, then the only downside would be that whoever I sent it to would not trust me as a file source.

All this was my very first crypt with Vcrypt. I would have done more, but it was like 4:30 am and I was beat.

I have to give this product a vouch. Upon payment, I was up and running in 5 minutes. I got pretty good results so far.I am going to play with my settings a bit today, and test against more AVs.
When I have more results I will post back with my settings.

This is more detailed than anyone has ever gone with this thing. Also a few notes guys. There are out there some antiviruses that check for every little thing happening on a persons pc. I have a possible bypass for these but I need to do some testing first to get a good idea on what I am up against. The bypass would basically make those Warnings never popup even though the AV would still throw them. At this time there is nothing I can do since there is no other safe action to run your crypted file.

[truroxx]

ok here...i have bought aatish crypter ,,ctypthex and have tried hell of things...and they could make my server FUD..(when check on scan4u site) but when it runs underprotection ok KASPERSKY and NORTAN it blocks .. that mean they are not realy run time FUD ...what about this crypter,,, we all know everbody can make it FUD ...but the thing about run time FUD .. since kaspersky runing self defence...

[Charon0831]

ok here...i have bought aatish crypter ,,ctypthex and have tried hell of things...and they could make my server FUD..(when check on scan4u site) but when it runs underprotection ok KASPERSKY and NORTAN it blocks .. that mean they are not realy run time FUD ...what about this crypter,,, we all know everbody can make it FUD ...but the thing about run time FUD .. since kaspersky runing self defence...

What RAT are you using ? I am installing a Windows 7 pro in Vmware right now to do some testing, and Kaspersky was on the to-do list.