Cheap KYC Verifications & Openups ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Spoof Call and Spoof SMS set any caller ◆ Traffic service & campaign optimization ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Beginner Hacking Hacking Tutorials › How AV killers work.

New Reply 

How AV killers work.
IcYSeptember
IcYSeptember Offline
Viewer discretion is advised.
***
HF Ub3r
Posts:
3,478
Threads:
285
Credibility:
000
Popularity:
81
βytes:
β 0
Game XP:
0
Sep 22, 2014 08:22 AM (This post was last modified: Sep 22, 2014 08:28 AM by IcYSeptember.)
Just thought I'd write up a quick paper on how AV killers work.

I'm not going into detail about how the file is deleted, or how any of the advanced stuff works...because that stuff is private, not a lot of people know that, I think.
Not a lot of people know the part I'm telling you, either.
This is not meant to bring on a new wave of skid malware that disables your AV, this is to bring common knowledge on how these things work so that they can be stopped.

Okay! On to the fun.

What is an AV killer?
Spoiler (Click to View)

How do they work?
Spoiler (Click to View)

I'll be releasing an AV killer tool in the Hacking Tools section in a few minutes, and I'll link to it here.

Edit: https://hackforums.net/showthread.php?tid=4457573
[Image: QiUbeYa.png]
kannss
kannss Offline
[bin@HF:]
*
Registered
Posts:
883
Threads:
129
Credibility:
000
Popularity:
51
βytes:
β 12
Game XP:
0
Sep 22, 2014 08:30 AM
thanks for proving good information sir
Waiting for tool to release
Austerity
Guest
 
Sep 22, 2014 03:04 PM
Very interesting piece of work you have made here, keep it up!
TheExclusive
TheExclusive Offline
[user@HF:]
*
Registered
Posts:
266
Threads:
40
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Sep 23, 2014 05:50 AM
Thanks for this very usefull information
Edge of Nowhere
Edge of Nowhere Offline
127.0.0.1
***
HF l33t
Posts:
2,151
Threads:
168
Credibility:
1300
Popularity:
495
βytes:
β 63.56
Game XP:
9,262
Sep 23, 2014 06:07 AM
I was surprised that I actually learned something from HF.

Good work, we need to talk in private. Have an interesting proposition for you.
[Image: e456a9db6c01.jpg]
Edge of Nowhere
No place in particular.
Meow
Meow Away
TG: meowhf
*
Posts:
24,140
Threads:
225
DO NOT DEAL WITH THIS MEMBER
βytes:
β 15,005
Game XP:
0
Sep 23, 2014 06:12 AM
Again,not sure what are you talking about but I'm sure it's some 1337 1-day Elite Sandboxie h4x0r shit!
Icy is very experienced 'hacker'.
Edge of Nowhere
Edge of Nowhere Offline
127.0.0.1
***
HF l33t
Posts:
2,151
Threads:
168
Credibility:
1300
Popularity:
495
βytes:
β 63.56
Game XP:
9,262
Sep 23, 2014 06:15 AM
(Sep 23, 2014 06:12 AM)Meow Wrote:  Again,not sure what are you talking about but I'm sure it's some 1337 1-day Elite Sandboxie h4x0r shit!
Icy is very experienced 'hacker'.

Bashing yet you didn't take 2 minutes to watch the video. It might not be a 0day, but it's equally as useful if used correctly.

Don't be mad he posted something useful and that you didn't.
[Image: e456a9db6c01.jpg]
Edge of Nowhere
No place in particular.
Meow
Meow Away
TG: meowhf
*
Posts:
24,140
Threads:
225
DO NOT DEAL WITH THIS MEMBER
βytes:
β 15,005
Game XP:
0
Sep 23, 2014 06:16 AM
(Sep 23, 2014 06:15 AM)Edge of Nowhere Wrote:  Bashing yet you didn't take 2 minutes to watch the video. It might not be a 0day, but it's equally as useful if used correctly.

Don't be mad he posted something useful and that you didn't.

HE IS MY CLOSE FRIEND AND I'M JOKING WITH HIM YOU DUMB..🤦‍♂
Edge of Nowhere
Edge of Nowhere Offline
127.0.0.1
***
HF l33t
Posts:
2,151
Threads:
168
Credibility:
1300
Popularity:
495
βytes:
β 63.56
Game XP:
9,262
Sep 23, 2014 06:17 AM
(Sep 23, 2014 06:16 AM)Meow Wrote:  HE IS MY CLOSE FRIEND AND I'M JOKING WITH HIM YOU DUMB..🤦‍♂

I'm supposed to know this? Next time, just don't post.
Just makes you look like an ignorant fool.
[Image: e456a9db6c01.jpg]
Edge of Nowhere
No place in particular.
IcYSeptember
IcYSeptember Offline
Viewer discretion is advised.
***
HF Ub3r
Posts:
3,478
Threads:
285
Credibility:
000
Popularity:
81
βytes:
β 0
Game XP:
0
Sep 23, 2014 07:54 AM
(Sep 23, 2014 06:17 AM)Edge of Nowhere Wrote:  I'm supposed to know this? Next time, just don't post.
Just makes you look like an ignorant fool.

Haha. It's fine, don't worry.

(Sep 23, 2014 06:07 AM)Edge of Nowhere Wrote:  I was surprised that I actually learned something from HF.

Good work, we need to talk in private. Have an interesting proposition for you.

I'm glad I could teach you something.

If you want to talk, PM me with your Skype/Jabber. :)
[Image: QiUbeYa.png]
Yoshikage Kira
Yoshikage Kira Offline
[closed@HF:]
Posts:
4,343
Threads:
114
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Sep 23, 2014 08:05 AM
There are some other options, I forget how betabot does it, but I am pretty certain it does not do this. I also remember that Jack's channel(before it got removed) uninstalled a few av's if they had the silent uninstall option.
IcYSeptember
IcYSeptember Offline
Viewer discretion is advised.
***
HF Ub3r
Posts:
3,478
Threads:
285
Credibility:
000
Popularity:
81
βytes:
β 0
Game XP:
0
Sep 23, 2014 08:16 AM
(Sep 23, 2014 08:05 AM)Yoshikage Kira Wrote:  There are some other options, I forget how betabot does it, but I am pretty certain it does not do this. I also remember that Jack's channel(before it got removed) uninstalled a few av's if they had the silent uninstall option.

Like I said, I think I found a new (possibly not new, but new to me) method.
I'll analyse how BetaBot does it (I've got a bin) and update this thread.
[Image: QiUbeYa.png]
tux1
tux1 Offline
rep 4 rep
*****
HF Ub3r
Posts:
10,922
Threads:
54
Credibility:
100
Popularity:
1,202
βytes:
β 0
Game XP:
3
Sep 23, 2014 09:16 AM
Pretty interesting, thanks for sharing.
Hey there,
If I have helped you or if you just enjoy my posts, please consider donating bitcoin to me 1DpL2kcxuidEsjt2MMN2AYufcVoXbi3v2X

[Image: FtwuQgr.gif]
Next Oldest | Next Newest
New Reply