[Fộrcəd]

[img]http://#/rZLnyf.png[/img]
THIS IS THE PROGRESS THREAD, THE SOFTWARE IS NOT YET FOR SALE.

There is tons of software on HF to encrypt,spread,connect,log,mine etc.
But not really any to "help" or prevent the users of HF to become an slave/being infected.

So this is just that. "UnSlaveMe" is a software designed to undo anything happening to your computer after a certain point.
Removing miners, loggers,rats etc with ease.No need for Sandbox or setting up a virtual machine
(As many or most malware has many types of antis that defeats such tools)


Spoiler (Click to View)
You simply launch "UnSlaveMe", click 1 button to generate a "Snapshot" of the current computer state/information and run the suspicious file.
If it turns out to be a malware you are 1 button away from removing it.
This unlike typical Bot-killers and Anti-Viruses does not "detect" anything or use any sort of database.
It basically takes what the user has defined as an white-list (The system at an "clean" state)
and compares that to how the system appears afterword, removing the difference. Therefore it does not matte if the file is FUD,UD or heavily detected.
Along the process it also outputs a log that show how the malware deploys and operates,
making the application not only helpful for removing but also doing general researching.
UnSlaveMe's destructive power can not only be used to remove malware, with features on the "to do" list like
detecting changes made to the registry. You may easily be able revert the "xx Days trial period" on certain programs.


Spoiler (Click to View)
[img]http://vvcap.net/db/JMwMyM7S3EOO-RYtEPZB.png[/img]
[img]http://vvcap.net/db/LHCa1zHNUXPbNCZW7-yN.png[/img]
[img]http://vvcap.net/db/aKxG0pGuj6gN6i_v52JR.png[/img]






-To Do List-
*Automatically detect changes made to the registry, act on that information
*Fully Integrate NetSeal

-Changelog per.11.07.2015-
Fixed issue where the software does not re-run the removal process
Re-coded main removal function for better stability and cleaned up some mess
Added new "Settings" menu to easily manage the features
Added an Anti-Persistence feature
Added Custom process termination (for user to define specific process to kill)
Added a "Extreme Mode" feature(basically find the source of any new process executed and kills/removes it. If used wrong can corrupt your system files.)
Added "Disable network" feature
Made if possible for user to define whether or not to kill "explorer.exe" on removal.
Added "Custom ext" makes in possible for users to include or exclude file extensions
Added "Whitelist" so user can define processes or file that are not to be touched.
[img]http://vvcap.net/db/BCx8U1S4jXIZYCTwqk4-.png[/img]



When copy's are available for sale they will ONLY be sold to users of HF. Lifetime license only.
Do you have an advanced malware? Please send me a copy so that i can test it on UnSlaveMe :)

You can also support this project by wearing the official signature! This will also get you a discount coupon code when sales have started.

Code

[url=https://hackforums.net/showthread.php?tid=4894467][align=center][img]https://i.imgur.com/ClHh0Rl.gif[/img][/align][/url]

[LordCoder]

It seems like KL-Detector released back in 2006. But it's quite nice to see a tool like this. How does it detect a silent miner?

[Dredd]

Correct me if I'm wrong but the demo there was basically a FileSystem watcher watching the whole system directory just detecting changes?

[Fộrcəd]

It seems like KL-Detector released back in 2006. But it's quite nice to see a tool like this. How does it detect a silent miner?

Like any other file, when you click "Generate snapshots" it collects information about the current system, it also start a logger that logs every .exe moved around your computer.
When you then launch a malware or anything else, i collects and stores information about it. when you click "remove" it compares the old info with the new one. and removes anything that was not on the old system.

It does not "scan" or use any database. Is a matter of detection a "difference" in the system.

(sry my bad english)

---

Correct me if I'm wrong but the demo there was basically a FileSystem watcher watching the whole system directory just detecting changes?

For files being moved yes a file-watcher is being used.

[Dredd]

For files being moved yes a file-watcher is being used.

FileSystem watcher detects changes to files, new files, deleted files and of course moved files.

[Fộrcəd]

FileSystem watcher detects changes to files, new files, deleted files and of course moved files.

Depends on the filters you set but yes?

[Unknown]

Seems quite useful considering there are some sketchy downloads out there (especially in the "Beginner Hacking" section on here). This project definitely has a lot of potential, I'd like to see where it goes!

[LordCoder]

Like any other file, when you click "Generate snapshots" it collects information about the current system, it also start a logger that logs every .exe moved around your computer.
When you then launch a malware or anything else, i collects and stores information about it. when you click "remove" it compares the old info with the new one. and removes anything that was not on the old system.

It does not "scan" or use any database. Is a matter of detection a "difference" in the system.

(sry my bad english)

But a silent miner doesn't drop any file to the system, correct? You could add a feature that detects the CPU usage of each process and it's more than 80-85% then remove it.

[Fộrcəd]

Seems quite useful considering there are some sketchy downloads out there (especially in the "Beginner Hacking" section on here). This project definitely has a lot of potential, I'd like to see where it goes!

Thanks for the feedback and interest 🤝

[ze-slade]

I'd definitely be interested in this. Subscribing to thread.

[Fộrcəd]

But a silent miner doesn't drop any file to the system, correct? You could add a feature that detects the CPU usage of each process and it's more than 80-85% then remove it.

Hmmm, that is a nice suggestion. However the programs does end processes that where not active at the time the "snapshot" was taken. But that was a really god suggestion, i may take that somewhere.

[Dredd]

Depends on the filters you set but yes?

You said you only use it for files being moved.

[Zettabit]

Hmmm, that is a nice suggestion. However the programs does end processes that where not active at the time the "snapshot" was taken. But that was a really god suggestion, i may take that somewhere.

It would be a good idea. What I would do is create a custom structure with options like ProcessName, PID, etc and loop through the current processes into an array. When the user wants to revert, compare the current processes with the previously captured list.

If there are any processes that aren't in the captured list, kill them.

Not a bad idea to be honest. It's nice to see things that are anti-malware instead of malware.

[Dredd]

It would be a good idea. What I would do is create a custom structure with options like ProcessName, PID, etc and loop through the current processes into an array. When the user wants to revert, compare the current processes with the previously captured list.

If there are any processes that aren't in the captured list, kill them.

Not a bad idea to be honest. It's nice to see things that are anti-malware instead of malware.

He said it already does that look up 2 posts.

[Fộrcəd]

It would be a good idea. What I would do is create a custom structure with options like ProcessName, PID, etc and loop through the current processes into an array. When the user wants to revert, compare the current processes with the previously captured list.

If there are any processes that aren't in the captured list, kill them.

Not a bad idea to be honest. It's nice to see things that are anti-malware instead of malware.

That is what it currently does . Thanks! I think so to.

---

You said you only use it for files being moved.

ohhhh! Now i see the point. yeah sorry, moved,created,deleted and modified!

---

Thanks for all the great feedback! Loving the warm welcome of new software here on this forum! :)