[Breakbot]

new 2012 EDIT : hey there everyone , i've found new methods of making your servers undetectable ( UD ) of 90% , i'm making this pole to see how many people are interessted in this :) feel free to Vote

thank's a lot

hello everyone

nowadays crypting trojan don't give a good result if you use use a public crypter , otherwise you need to buy a private edition or to hex it .

so here's a little tip to how make it almost FUD .

we gonna need a ( Privacy Protection Software )
this kind of softwares is used by programs creators to protect their creation from cracking and reverse engineering . we gonna do the same
to a trojan and you are going to see the result 😉

first of alll you need to download the program : PC guard for win32
google is your friend 😉

let's start :

server's location ->
[img]http://img94.imageshack.us/img94/8449/29726338.jpg[/img]

then -> general
[img]http://img706.imageshack.us/img706/5905/91158931.jpg[/img]

Security & Encryption
[img]http://img141.imageshack.us/img141/351/50217601.jpg[/img]

Protection Method
[img]http://img707.imageshack.us/img707/8194/47781258.jpg[/img]

and we are done ! 😏

results :

poison ivy server :
[img]http://img30.imageshack.us/img30/2347/scnnp.jpg[/img]

bifrost server :
[img]http://img13.imageshack.us/img13/6002/scanno.jpg[/img]

hope it works for you guys

🎉

any questions ? Pm me and i will answer you as soon as i can .

PS :SORRY I'm not used to speak english .

[Mar0x]

Nice tutorial. I just tried it on a CyberGate server and it got detected by 3 of out 19 Anti-viruses.
The only down side was that a notification popped up stating it had been protected by the demo version.

[Falconidae]

Very nice tutorial! I shall be using this method.

[Mr Evil Chaos]

BEFORE
Spoiler (Click to View) File Info

Report date: 18.2.2010 at 3.17.45 (GMT 1)
File name: MicrosoftGen.exe_OLD
File size: 471040 bytes
MD5 Hash: c5fcf85cd653ea7acb544434f2f68345
SHA1 Hash: E351562937C9E413B79E85AB83A76C2B0B30C06F
Detection rate: 10 on 19
Status: INFECTED

Detections

a-squared - Virus.Win32.Delf!IK
Avira AntiVir - TR/Spy.Gen
Avast - Win32:Malware-gen
AVG - SHeur2.BYZM
BitDefender - Trojan.Generic.2889296
ClamAV - Trojan.Agent-134263
Comodo - -
Ewido - -
F-PROT6 - W32/Trojan2.LFCU
G-Data - -
Ikarus T3 - Virus.Win32.Delf
Kaspersky - HEUR:Trojan.Win32.Generic
McAfee - -
NOD32 - Win32/Lypserat.A
Panda - -
Solo Antivirus - -
TrendMicro - -
VirusBuster - -
ZonerAntivirus - -

Scan report generated by
NoVirusThanks.org

AFTER
Spoiler (Click to View) File Info

Report date: 18.2.2010 at 3.17.42 (GMT 1)
File name: MicrosoftGen.exe
File size: 559616 bytes
MD5 Hash: 29c9f252e30615a8be109267446ea28a
SHA1 Hash: 1A1EECDB616EF0485C38AD736722EE8FC2E4E682
Detection rate: 3 on 19
Status: INFECTED

Detections

a-squared - -
Avira AntiVir - DR/Delphi.Gen
Avast - -
AVG - -
BitDefender - -
ClamAV - -
Comodo - -
Ewido - -
F-PROT6 - -
G-Data - -
Ikarus T3 - -
Kaspersky - HEUR:Trojan.Win32.Generic
McAfee - -
NOD32 - Win32/Lypserat.A
Panda - -
Solo Antivirus - -
TrendMicro - -
VirusBuster - -
ZonerAntivirus - -

Scan report generated by
NoVirusThanks.org

Do you know who to get the full one free?

[-mothered-]

Looks Interseting. Will have to go through It before making any conclusive comments.
Thanks for the share :)

[Breakbot]

"" BEFORE
Spoiler (Click to Hide)
File Info

Report date: 18.2.2010 at 3.17.45 (GMT 1)
File name: MicrosoftGen.exe_OLD
File size: 471040 bytes
MD5 Hash: c5fcf85cd653ea7acb544434f2f68345
SHA1 Hash: E351562937C9E413B79E85AB83A76C2B0B30C06F
Detection rate: 10 on 19
Status: INFECTED

Detections

a-squared - Virus.Win32.Delf!IK
Avira AntiVir - TR/Spy.Gen
Avast - Win32:Malware-gen
AVG - SHeur2.BYZM
BitDefender - Trojan.Generic.2889296
ClamAV - Trojan.Agent-134263
Comodo - -
Ewido - -
F-PROT6 - W32/Trojan2.LFCU
G-Data - -
Ikarus T3 - Virus.Win32.Delf
Kaspersky - HEUR:Trojan.Win32.Generic
McAfee - -
NOD32 - Win32/Lypserat.A
Panda - -
Solo Antivirus - -
TrendMicro - -
VirusBuster - -
ZonerAntivirus - -

Scan report generated by
NoVirusThanks.org

AFTER
Spoiler (Click to Hide)
File Info

Report date: 18.2.2010 at 3.17.42 (GMT 1)
File name: MicrosoftGen.exe
File size: 559616 bytes
MD5 Hash: 29c9f252e30615a8be109267446ea28a
SHA1 Hash: 1A1EECDB616EF0485C38AD736722EE8FC2E4E682
Detection rate: 3 on 19
Status: INFECTED

Detections

a-squared - -
Avira AntiVir - DR/Delphi.Gen
Avast - -
AVG - -
BitDefender - -
ClamAV - -
Comodo - -
Ewido - -
F-PROT6 - -
G-Data - -
Ikarus T3 - -
Kaspersky - HEUR:Trojan.Win32.Generic
McAfee - -
NOD32 - Win32/Lypserat.A
Panda - -
Solo Antivirus - -
TrendMicro - -
VirusBuster - -
ZonerAntivirus - -

Scan report generated by
NoVirusThanks.org ""

PS : i didn't say that it going to be FUD but almost fud xD

[Charity]

Good + original tutorial. Have seen a couple like this but this has new stuff, so it's good, IMO.

[Breakbot]

Nice tutorial. I just tried it on a CyberGate server and it got detected by 3 of out 19 Anti-viruses.
The only down side was that a notification popped up stating it had been protected by the demo version.

then you gotta find a full version ✌

Very nice tutorial! I shall be using this method.

thanks

Looks Interseting. Will have to go through It before making any conclusive comments.
Thanks for the share :)

please tell me what the result is 😉

ood + original tutorial. Have seen a couple like this but this has new stuff, so it's good, IMO.

you're welcome . 👍

[Mr Evil Chaos]

i know it aint FUD but im guessing the FUD will but in the full one

[Black Hat Jack]

This has been known for a while. but thanks for the share. its great for some people that cant afford a great crypter!

and btw. @ casarat; dont use that scanner any more. it spreads like mad to anti virus corps. if you want it to stay slightly UD long. only. and i mean only scan with "no virus thanks", and make SURE "do not distribute samples" is checked.

[Neroxan]

i know it aint FUD but im guessing the FUD will but in the full one

Keep guessing. Protection software is often found as viruses because they are used on legit and malicious applications.
Themida shows as virus if you compile a clean project and protect it with it, this is no different.

However I do have a private protection software that Im gonna try with this now.

Nice to see the guide in english instead of having to translate it, thanks😁

[Breakbot]

and btw. @ casarat; dont use that scanner any more. it spreads like mad to anti virus corps. if you want it to stay slightly UD long. only. and i mean only scan with "no virus thanks", and make SURE "do not distribute samples" is checked.

Code

yeah i know    , thanks anyways 😁

[Gino90]

Well this has been known for a while but great tut dud, and also the crypted file will run only about 20 times in the demo version. anyway, thanks for sharing buddy.

[Breakbot]

you're welcome .
i will try to find a full version . and post the RS donwload link.

[digger183]

Thanks for the tut, I just dont like the demo thing xD.