DO NOT DEAL WITH THIS MEMBER
Jan 16, 2011 02:52 AM
(This post was last modified: Jan 16, 2011 02:53 AM by Mortalis Piratica.)
[img]http://img717.imageshack.us/img717/1668/capturewgj.png[/img]
Features :
File binder
File pumper
File cloner
Icon changer
Private runPE (tested and working under XP / VISTA / 7)
Custom process injection
2 encryption's choices : RC4, TripleDES, XOR
Anti's : threatexpert, anubis, sandboxie, vm and windows defender.
Credits:
Moon Crypter
Download:
Quote:http://www.mediafire.com/?maabzsdqszkmygl
Virus Scan: http://vscan.novirusthanks.org/analysis/...0ZXItZXhl/
Does This File Clean ? Some one can help to check it ?
A nice AIO tool there mate. I would've liked to have seen a broader range of Antis, but nevertheless, I appreciate this.
Many thanks.
your warning leval is 60% can we trust you?
Jan 16, 2011 03:29 AM
(This post was last modified: Jan 16, 2011 03:33 AM by h4yR0.)
Is that Moon crypter REFUDED ?
Crypter maaybe 1/16 , but stub is fully detectable
DO NOT DEAL WITH THIS MEMBER
(Jan 16, 2011 03:04 AM)-mothered- Wrote: A nice AIO tool there mate. I would've liked to have seen a broader range of Antis, but nevertheless, I appreciate this.
Many thanks.
Agreed, is lacking some of them.
I swear, alot of you noobs are annoying. He is trustable, he undetected a crypter and modified it with his own design. Quit asking "Is it clean"
This looks good, I will try this on my Virtual Machine.
Thanks for sharing.
-Egabell1
DO NOT DEAL WITH THIS MEMBER
Its Moon Crypter source but i made it little undetectable and add new Encryption feature of XOR, this is public i will release private version as well.
i get error when i run this crypter
DO NOT DEAL WITH THIS MEMBER
(Jan 16, 2011 04:19 AM)Czarek580 Wrote: i get error when i run this crypter
Can you give me the screen shot???
Wow, crypted server scan result on novirusthanks: File Info
Report date: 2011-01-16 12:36:54 (GMT 1)
File name: done-exe
File size: 1196953 bytes
MD5 Hash: 986c13344252436b6aebd82a826977c0
SHA1 Hash: 1d4ebccdb2f32bb401092c3728ca263a15c9171a
Detection rate: 12 on 16 (75%)
Status: INFECTED
Detections
a-squared - Trojan-Dropper.MSIL!IK
Avast - Win32:Delf-AIC [Trj]
AVG - Dropper.Small.CLX
Avira AntiVir - BDS/Backdoor.Gen
BitDefender - Trojan.Generic.3918210
ClamAV - Trojan.Dropper-26174
Comodo -
Dr.Web - Win32.HLLW.Autoruner.25074
F-PROT6 - W32/MalwareS.BFKJ
Ikarus T3 - Trojan-Dropper.MSIL
Kaspersky -
NOD32 - MSIL/Injector.E
Panda -
TrendMicro -
VBA32 - TrojanDropper.MSIL.StubRC.dpi
VirusBuster - Trojan.DR.Dunik!9F12meIHspU
Scan report generated by
NoVirusThanks.org
Thanks anyways.
-Egabell1
it works with wich rat ? thanks for the thread man
DO NOT DEAL WITH THIS MEMBER
(Jan 16, 2011 04:42 AM)war-sat Wrote: it works with wich rat ? thanks for the thread man
LolZ didn't checked yet can anyone check this?
uhm...
Report date: 2011-01-16 13:17:44 (GMT 1)
File name: done-exe
File size: 367711 bytes
MD5 hash: 397cedab05c4f4dc44f9afff32005529
SHA1 hash: dca2ea748135b3526a72eb5a28dee94ae29c6f0c
Detection rate: 12 on 16 (75%)
Status: INFECTED
Antivirus Database Engine Result
a-squared 16/01/2011 5.0.0.20 Trojan-Dropper.MSIL!IK
Avast 16/01/2011 5.0 Win32:KeyLogger-ARY [Spy]
AVG 16/01/2011 9.0.0.725 Dropper.Small.CLX
Avira AntiVir 16/01/2011 7.6.0.59 BDS/Backdoor.Gen
BitDefender 16/01/2011 7.0.0.2555 Trojan.Generic.3918210
ClamAV 16/01/2011 0.96.2.1 Trojan.Dropper-26174
Comodo 16/01/2011 4.0
Dr.Web 16/01/2011 5.00.0 Win32.HLLW.Autoruner.25074
F-PROT6 16/01/2011 4.6.1.107 W32/MalwareS.BFKJ
Ikarus T3 16/01/2011 1001084 Trojan-Dropper.MSIL
Kaspersky 16/01/2011 9.0.0.736
NOD32 16/01/2011 4.2.42.0 MSIL/Injector.E
Panda 16/01/2011 10.0.3.0
TrendMicro 16/01/2011 9.120-1004
VBA32 16/01/2011 3.12.14.1 Trojan-Dropper.MSIL.StubRC.aha
VirusBuster 16/01/2011 1.5.6 Trojan.DR.Dunik!9F12meIHspU
''crypted'' BS server. lol it went from 10/16 to 12/16.. WTH..
|
