WIll update the Descryption of Startups now
Updated, But Still doing tests on Diferent OS
ok bro take ur own time i m here only
Do you Have a Tutorial For Darkcomet Rats ??
i wait one good tutorial for it :)Crypting
(Nov 28, 2010 08:56 AM)SHARB Wrote: Do you Have a Tutorial For Darkcomet Rats ??
i wait one good tutorial for it :)Crypting
No man, I've Tried, but i cant...
i think is not compatible with Crypter...
hey small doubt, i cant understand one thing clearly, u r saying to use system file name (like winlogon.exe ,csrss.exe or some fake names?
Opportunity may knock only once, but temptation leans on the
doorbell
Will i keep my slaves with this setting, because before after they restarted the PC i lost tham
Ty for quick reply
Just did everything you said, just having a problem with my scan, avast and ikarus are finding it as a Win32:Crypt-ICE. Anything I can do to stop that? Anyways, real nice tutorial mate, thanks :)
If you follow the instructions above its going to be fud
Scan:
File Info
Report date: 2010-11-28 18:08:57 (GMT 1)
File name: crypted-server-exe
File size: 845824 bytes
MD5 Hash: eb33b3171d6ba42264743cc0f44d36b0
SHA1 Hash: f993e606a1e61c45485a6c1aad8a1f2bca74c81e
Detection rate: 0 on 16 (0%)
Status: CLEAN
Detections
a-squared -
Avast -
AVG -
Avira AntiVir -
BitDefender -
ClamAV -
Comodo -
Dr.Web -
F-PROT6 -
Ikarus T3 -
Kaspersky -
NOD32 -
Panda -
TrendMicro -
VBA32 -
VirusBuster -
Scan report generated by
NoVirusThanks.org
i say TO DONT use files like winlogon.exe, csrss.exe, so USE FAKE NAMES, LIke winlogin, exporer, crscss.
undersyand now?
(Nov 28, 2010 10:03 AM)chronicle15 Wrote: Just did everything you said, just having a problem with my scan, avast and ikarus are finding it as a Win32:Crypt-ICE. Anything I can do to stop that? Anyways, real nice tutorial mate, thanks :)
c6p0 need update Own'Z CryptZ man...
codedom is detected 2/16... so...
wait new update
I'm getting this:
• ... Start Encryptions ... • 19:20:58
Insert Code Antis ... - 19:20:58
Check File Bind : C:\Users\PhilipHussak\Downloads\CyberGate v1.07.5\s3rver.exe ok 19:20:58
Encrypt Files ... - Ok 19:20:58
Make : C:\Users\PhilipHussak\Downloads\123.exe Ok 19:20:58
Change Icone ... - Ok 19:21:01
Erreur : The process couldn't acces the file 'C:\Users\PhilipHussak\Downloads\Crypters\2.2.6\res.exe', because it's used by another process. - 19:21:01
and the taskmanager shows it as Form1 in the Window list, and on process show's my named Server in Cybergate, thought it was fixed:(.. help.. :O?
(Nov 28, 2010 11:26 AM)Sequence Wrote: I'm getting this:
• ... Start Encryptions ... • 19:20:58
Insert Code Antis ... - 19:20:58
Check File Bind : C:\Users\PhilipHussak\Downloads\CyberGate v1.07.5\s3rver.exe ok 19:20:58
Encrypt Files ... - Ok 19:20:58
Make : C:\Users\PhilipHussak\Downloads\123.exe Ok 19:20:58
Change Icone ... - Ok 19:21:01
Erreur : The process couldn't acces the file 'C:\Users\PhilipHussak\Downloads\Crypters\2.2.6\res.exe', because it's used by another process. - 19:21:01
and the taskmanager shows it as Form1 in the Window list, and on process show's my named Server in Cybergate, thought it was fixed:(.. help.. :O?
Startup 1-->standard startup normal this use name msnua.exe SO dont use the name you write in Cybergate.
Startup 2-->startup strong 1 key, normal method and this use your server name you write in cybergate
Startup 3-->heavy startup, this make 2 key, one normal, another with reflection asembly this use too your server name you write in cybergate
and about the error, RE-EXTRACT the crypter and run again
Read Before Post!
Still messes up my server after following your tutorial.
upto my knowledge the startup3 only works after the restart .
Opportunity may knock only once, but temptation leans on the
doorbell
My bot does not connect after crypting using what you have provided. IT DOES before.
I get Erreur : Attempted to read or write protected memory. This is often an indication that other memory is corrupt. - 21:14:22
what about it ? :/
|
