[Foreground]

Hello first of all.

I have a question I want to ask help for.
I am coding a crypter in vb.net and I got this detection by MS Security Essentials: VirTool:MSIL/Injector.ED
@ formload I added a process.stop from a function with, as far as I know all the known executable files from this MS program.
Does anybody here know why this detection still remain after me killing all the processes(fully)?
If you need to know more, please let me know.

Regards,
Foreground.

[Increment]

Most likely your RunPE is detected. Encrypt it in a dll and invoke it at runtime to escape from these detections.

[Foreground]

Thanks for the reply.

I know, I have an encrypted.dll version also.
This one is pure code.
My crypter kills 5 processes at start, but still the detection is raising. I don't know why.