Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

.NET 

[VB.net] How to create a scantime crypter! [TUT]

(Mar 27, 2010 12:13 PM)Drake™ Wrote:  If you don't know, then don't try.

Learn the basics first, this is obviously too hard for you.


I know the basics...

and if i don't try then where the fuck is that going to take me?
(Mar 27, 2010 12:16 PM)Professional Wrote:  I know the basics...

and if i don't try then where the fuck is that going to take me?

Dude, stop posting in my threads.

This is too hard for you.
ok... you probably never even posted this thread... for one you just took it off someone else at least you gave credits...

If you don't know how to solve a problem... then why don't you say i don't know... is it to hard for you?

If you knew how to solve this problem then you would tell me but you don't so STFU and if some one knows how to solve this problem then they can help me.
(Mar 27, 2010 12:29 PM)Professional Wrote:  ok... you probably never even posted this thread... for one you just took it off someone else at least you gave credits...

If you don't know how to solve a problem... then why don't you say i don't know... is it to hard for you?

If you knew how to solve this problem then you would tell me but you don't so STFU and if some one knows how to solve this problem then they can help me.

Dude, this is open source.

I know how to solve it, but me telling you isn't going to help you learn.

Telling me to STFU in my own thread? You make me lol.
Yay! 8000 views. <3
I try to make that work, already 3 days, seems i did all right, but when i open nothing happens except 2 minimized command prompt open with the process name ntvdm.exe, and close immediately ... Any idea how to fix that?
Now i got the command prompt in normal state and, it write program too bid to fit in memory, but the program is less than 1 mb ...
Just download the project dude. Look on the second page.
It does the same, oh and it does the same when i compile the stub, lol ...
You are doing something wrong dude.

YESHHH!!!! 4600 posts!!!
what can i do wrong? I downloaded the project, debugged the stub, it opens the same command promp, why that???

There is the debug note:
Code
'crypter stub.vshost.exe' (Managed): Loaded 'C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll', Skipped loading symbols. Module is optimized and the debugger option 'Just My Code' is enabled.
'crypter stub.vshost.exe' (Managed): Loaded 'C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.HostingProcess.Utilities\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.HostingProcess.Utilities.dll', Skipped loading symbols. Module is optimized and the debugger option 'Just My Code' is enabled.
'crypter stub.vshost.exe' (Managed): Loaded 'C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll', Skipped loading symbols. Module is optimized and the debugger option 'Just My Code' is enabled.
'crypter stub.vshost.exe' (Managed): Loaded 'C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll', Skipped loading symbols. Module is optimized and the debugger option 'Just My Code' is enabled.
'crypter stub.vshost.exe' (Managed): Loaded 'C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll', Skipped loading symbols. Module is optimized and the debugger option 'Just My Code' is enabled.
'crypter stub.vshost.exe' (Managed): Loaded 'C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.HostingProcess.Utilities.Sync\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.HostingProcess.Utilities.Sync.dll', Skipped loading symbols. Module is optimized and the debugger option 'Just My Code' is enabled.
'crypter stub.vshost.exe' (Managed): Loaded 'C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Debugger.Runtime\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Debugger.Runtime.dll', Skipped loading symbols. Module is optimized and the debugger option 'Just My Code' is enabled.
'crypter stub.vshost.exe' (Managed): Loaded 'C:\Documents and Settings\Daniel\Desktop\crypter stub\crypter stub\bin\Debug\crypter stub.vshost.exe', Skipped loading symbols. Module is optimized and the debugger option 'Just My Code' is enabled.
'crypter stub.vshost.exe' (Managed): Loaded 'C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll', Skipped loading symbols. Module is optimized and the debugger option 'Just My Code' is enabled.
'crypter stub.vshost.exe' (Managed): Loaded 'C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll', Skipped loading symbols. Module is optimized and the debugger option 'Just My Code' is enabled.
'crypter stub.vshost.exe' (Managed): Loaded 'C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.dll', Skipped loading symbols. Module is optimized and the debugger option 'Just My Code' is enabled.
'crypter stub.vshost.exe' (Managed): Loaded 'C:\WINDOWS\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll', Skipped loading symbols. Module is optimized and the debugger option 'Just My Code' is enabled.
'crypter stub.vshost.exe' (Managed): Loaded 'C:\WINDOWS\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll', Skipped loading symbols. Module is optimized and the debugger option 'Just My Code' is enabled.
'crypter stub.vshost.exe' (Managed): Loaded 'C:\WINDOWS\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll', Skipped loading symbols. Module is optimized and the debugger option 'Just My Code' is enabled.
'crypter stub.vshost.exe' (Managed): Loaded 'C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll', Skipped loading symbols. Module is optimized and the debugger option 'Just My Code' is enabled.
The thread 0x564 has exited with code 0 (0x0).
The thread 0xe68 has exited with code 0 (0x0).
'crypter stub.vshost.exe' (Managed): Loaded 'C:\Documents and Settings\Daniel\Desktop\crypter stub\crypter stub\bin\Debug\crypter stub.exe', Symbols loaded.
'crypter stub.vshost.exe' (Managed): Loaded 'C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll', Skipped loading symbols. Module is optimized and the debugger option 'Just My Code' is enabled.
A first chance exception of type 'System.IndexOutOfRangeException' occurred in crypter stub.exe
The program '[1300] crypter stub.vshost.exe: Managed' has exited with code 0 (0x0).
Thank you this was the best tut ever, I was successful in doing this, except my stub has a 4 detection rate, is their a way to tweek the code to fix this?
Code
File Info

Report date: 2010-04-01 04:50:27 (GMT 1)
File name: stub.exe
File size: 21504 bytes
MD5 Hash: 1a0170606950ef257b9d6f1b2ee0d8f2
SHA1 Hash: 059586339bb3898dd97c5029649258f7c242f49d
Detection rate: 4 on 20 (20%)
Status: INFECTED

Detections

a-squared - Trojan-Dropper.MSIL!IK
Avast - -
AVG - -
Avira AntiVir - -
BitDefender - -
ClamAV - -
Comodo - -
Dr.Web - -
Ewido - -
F-PROT6 - -
G-Data - -
Ikarus T3 - Trojan-Dropper.MSIL
Kaspersky - -
McAfee - Generic MSIL.a trojan
NOD32 - MSIL/TrojanDropper.Agent.T
Panda - -
TrendMicro - -
VBA32 - -
VirusBuster - -
Zoner - -

Scan report generated by
NoVirusThanks.org
@GodWall - Don't fix what isn't broken.

If your a good coder, you will know how to lower the detection rate.
Ok cool, your right it works gr8 brought my server from 15 detection to a 5 detection, I tried using an Assembly Generator on my stubs to make them unique made 6 stubs but still all have same detection rate, but their assembly's are unique lol I also added an Icon to the crypter as well as to the stubs, LOL I like to think I'm a good coder and its truly my goal to be a good coder, but I'm just starting out, I read coding books in my spare time and know with practice I will get their, thanks again 4 this tut Its the best :)
(Mar 31, 2010 09:26 PM)GodWall Wrote:  Ok cool, your right it works gr8 brought my server from 15 detection to a 5 detection, I tried using an Assembly Generator on my stubs to make them unique made 6 stubs but still all have same detection rate, but their assembly's are unique lol I also added an Icon to the crypter as well as to the stubs, LOL I like to think I'm a good coder and its truly my goal to be a good coder, but I'm just starting out, I read coding books in my spare time and know with practice I will get their, thanks again 4 this tut Its the best :)

No problem. 🤝
umm, is this a program that u hide the virus's?
or is a a scanner?
Sorry, im not to good at crypter :3


Possibly Related Threads...
Thread / Author Replies Views Last Post
[.NET] by VisualSoftApr 18, 2020 03:11 AM 78 13,077 Apr 18, 2020 03:11 AM
Last Post: VisualSoft
[.NET] by i-manuelJul 1, 2016 12:31 AM 19 877 Jul 1, 2016 12:31 AM
Last Post: Hopsin
[.NET] by xeinebiuJan 12, 2016 02:14 PM 14 1,528 Jan 12, 2016 02:14 PM
Last Post: xeinebiu