ProxiesFood: Unlimited Residential Proxy ◆ Spoof Call and Spoof SMS set any caller ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Cheap KYC Verifications & Openups ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Marketplace Premium Premium Sellers Section › [Up For 1 Year, 8 Months] Chronic Crypter | Bypass KIS/Sonar | Scanner [Autobuy]

New Reply 

[Up For 1 Year, 8 Months] Chronic Crypter | Bypass KIS/Sonar | Scanner [Autobuy]
BlackRockShooter
BlackRockShooter Offline
German member. You Schnitzel.
***
HF l33t
Posts:
1,179
Threads:
69
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 14, 2012 10:56 PM
The same file was FUD yesterday, now:

Spoiler (Click to View)

Is anyone getting lower detections? I use DarkComet, HQ Icon, Startup (Appdata), Bypass Sonar/Avast and Patch PEB.
This account is inactive due to HF banning my network-wide private VPN (thanks for that!). It was a great time on here. ♥
scorpionwally8
scorpionwally8 Offline
[user@HF:]
*
Registered
Posts:
483
Threads:
25
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 15, 2012 01:16 AM
This is a top crypter I'd recommend this to anyone, banksy also works hard and keeps it fud
๖ۣۜNoShame
Guest
 
Dec 15, 2012 01:17 AM
@Kulikuz
same here but with different detections
RESULTS: 6/35
AVG Free -
ArcaVir -
Avast 5 -
AntiVir (Avira) -
BitDefender - Gen:Variant.Barys.10733
VirusBuster -
Clam -
COMODO -
Dr.Web -
eTrust-Vet -
F-PROT -
F-Secure - Gen:Variant.Barys.10733
G Data - Gen:Variant.Barys.10733
IKARUS -
Kaspersky -
McAfee -
MS Essentials -
ESET NOD32 - Trojan.MSIL/Injector.AVH
Norman -
Norton -
Panda -
A-Squared -
Quick Heal -
Solo -
Sophos -
Trend Micro -
VBA32 -
Vexira -
Zoner AntiVirus -
Ad-Aware -
BullGuard - Gen:Variant.Barys.10733
Immunet - Gen:Variant.Barys.10733
K7 Ultimate -
NANO -
VIPRE -

File Name CF Hack.exe
File Size: 894464
File MD5: 518ce2a1ecdf95a9be8bb86a2239ec73
File SHA1: 30fdedc1d21f9526871d8afcd6cc1d1cd2663f3b
Check Time: 2012-12-15 10:16:00

Scan report generated by
Scan4You.Net

Also new thread design = sexyy
FockerPT
Guest
 
Dec 15, 2012 02:22 AM
It's a great crypter bought it, but currently it's 3/35, please RE-FUD :)

[img]http://elementscanner.com//image.php?ID=e990b78c852ba18d3ea82ba15064602f[/img]
GlenDavis11
Guest
 
Dec 15, 2012 02:31 AM
Hello. I am writing on behalf of a friend (Owl City) in great distress. He is currently banned for 7 days so he cannot post himself. Anyway, he believes the authorities are about to use one of his RAT slaves to trace back to himself. He is desperately trying to completely delete his server but every time he uninstalls it, it comes back due to the Anti-Delete in Chronic Crypter. He has used the default startup/installation options and injected to cvtres.exe

How should he delete the malware? This urgent. Thank you.
Pitifoul
Pitifoul Offline
[closed@HF:]
Posts:
317
Threads:
16
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Dec 15, 2012 03:28 AM
I got 1/35 with assembly and startup :

Spoiler (Click to View)
BlackRockShooter
BlackRockShooter Offline
German member. You Schnitzel.
***
HF l33t
Posts:
1,179
Threads:
69
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 15, 2012 04:25 AM
(Dec 15, 2012 03:28 AM)Pitifoul Wrote:  I got 1/35 with assembly and startup :

Spoiler (Click to View)

Could you tell me what settings you used exactly? 🤝
This account is inactive due to HF banning my network-wide private VPN (thanks for that!). It was a great time on here. ♥
Kapama
Guest
 
Dec 15, 2012 08:46 AM
(Dec 15, 2012 03:28 AM)Pitifoul Wrote:  I got 1/35 with assembly and startup :

Spoiler (Click to View)
How did you did that ?
i'm getting 9/35 with DarkComet
Banksу
Banksу Offline
[closed@HF:]
Posts:
5,733
Threads:
62
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Dec 15, 2012 08:52 AM (This post was last modified: Dec 15, 2012 08:54 AM by Banksу.)
(Dec 15, 2012 02:31 AM)GlenDavis11 Wrote:  Hello. I am writing on behalf of a friend (Owl City) in great distress. He is currently banned for 7 days so he cannot post himself. Anyway, he believes the authorities are about to use one of his RAT slaves to trace back to himself. He is desperately trying to completely delete his server but every time he uninstalls it, it comes back due to the Anti-Delete in Chronic Crypter. He has used the default startup/installation options and injected to cvtres.exe

How should he delete the malware? This urgent. Thank you.

What RAT is he using? Does it allow the use of scripting (VBS or even cmd)?
(Dec 15, 2012 08:46 AM)Kapama Wrote:  How did you did that ?
i'm getting 29/35 with DarkComet
and 11/35 with Stealers
Spoiler (Click to View)

You have to actually crypt it... You are scanning the uncrypted files.
ℭrypto ℬroker
ℭrypto ℬroker Offline
Crypto Trader
Posts:
586
Threads:
43
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Dec 15, 2012 09:14 AM (This post was last modified: Dec 15, 2012 09:17 AM by ℭrypto ℬroker.)
I got 1/35 using Dc. I did not use icon, botkill or anti delete.

RESULTS: 1/35
AVG Free -
ArcaVir -
Avast 5 -
AntiVir (Avira) -
BitDefender -
VirusBuster -
Clam -
COMODO -
Dr.Web -
eTrust-Vet -
F-PROT -
F-Secure -
G Data -
IKARUS -
Kaspersky -
McAfee -
MS Essentials -
ESET NOD32 - Trojan.MSIL/Injector.AVH
Norman -
Norton -
Panda -
A-Squared -
Quick Heal -
Solo -
Sophos -
Trend Micro -
VBA32 -
Vexira -
Zoner AntiVirus -
Ad-Aware -
BullGuard -
Immunet -
K7 Ultimate -
NANO -
VIPRE -

File Name 1512.exe
File Size: 722944
File MD5: b5cd4d13437c541f2b1f33182e341967
File SHA1: d5de415a394de108c77fa7ca0fb5096d1f2d66d6
Check Time: 2012-12-15 18:11:44

Scan report generated by
Scan4You.Net
I got 1/35 using DC. I did not use icon, botkill or Anti Delete.
So i dont know how you guys get 6/35 etc. Try not using the settings above^ maby it helps idk.
RESULTS: 1/35
AVG Free -
ArcaVir -
Avast 5 -
AntiVir (Avira) -
BitDefender -
VirusBuster -
Clam -
COMODO -
Dr.Web -
eTrust-Vet -
F-PROT -
F-Secure -
G Data -
IKARUS -
Kaspersky -
McAfee -
MS Essentials -
ESET NOD32 - Trojan.MSIL/Injector.AVH
Norman -
Norton -
Panda -
A-Squared -
Quick Heal -
Solo -
Sophos -
Trend Micro -
VBA32 -
Vexira -
Zoner AntiVirus -
Ad-Aware -
BullGuard -
Immunet -
K7 Ultimate -
NANO -
VIPRE -

File Name 1512.exe
File Size: 722944
File MD5: b5cd4d13437c541f2b1f33182e341967
File SHA1: d5de415a394de108c77fa7ca0fb5096d1f2d66d6
Check Time: 2012-12-15 18:11:44

Scan report generated by
Scan4You.Net
lαχυs
Guest
 
Dec 15, 2012 10:33 AM
I'm getting 1/35 with darkcomet, please re-FUD, thank you bro. Only detect by ESet :( Damn ESET!!!
Kapama
Guest
 
Dec 15, 2012 11:34 AM
It's 1/35 For me too with DC
No icon - Startup + Assembly
Pitifoul
Pitifoul Offline
[closed@HF:]
Posts:
317
Threads:
16
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Dec 15, 2012 12:05 PM
(Dec 15, 2012 08:46 AM)Kapama Wrote:  How did you did that ?
i'm getting 9/35 with DarkComet

(Dec 15, 2012 04:25 AM)BlackRockShooter Wrote:  Could you tell me what settings you used exactly? 🤝

I'm using Blackshades.
Server side : Nothing checked/No Options
Crypter side : Startup, "explorer.exe" assembly, injection process : "csc.exe"
Titanium³
Titanium³ Offline
[user@HF:]
**
HF Ub3r
Posts:
383
Threads:
25
Credibility:
000
Popularity:
15
βytes:
β 0
Game XP:
0
Dec 15, 2012 12:13 PM
Huge vouch. Great program. It's still getting detected on 1 AV, but it's nothing major.
Also, I love that it's lifetime. That is why I chose Chronic over all others.
GlenDavis11
Guest
 
Dec 15, 2012 01:00 PM
(Dec 15, 2012 08:52 AM)Banksу Wrote:  What RAT is he using? Does it allow the use of scripting (VBS or even cmd)?

He is using DarkComet and BlackShades. He has access to both.
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Gemini100Jul 15, 2026 05:52 AM 3 83 Jul 15, 2026 05:52 AM
Last Post: Gemini100
by HavenlyshopJul 14, 2025 05:22 AM 1 144 Jul 14, 2025 05:22 AM
Last Post: LitProxy
by VibeAug 11, 2023 12:07 AM 2 201 Aug 11, 2023 12:07 AM
Last Post: BlackPanth3R