Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Common RAT Questions

Is there any possible way of getting a FUD rat past Windows Defender? I've been having this problem while sending it to my second desktop.
I have no problems getting past AVs, except for WD.
Any suggestions and tips?
If it is detected by WD then it is not considered FUD, FUD stands for Fully Undetectable
try crypting it, if you have already crypted it, try it again, scan to test if your stub is FUD one one of these sites
avoid scanning it on virus total as they share their results IIRC

Scan.majyx.net
nodistribute.com
razorscanner
xcscanner.com
Is it strange to anyone that these two people both have joined on Feb 2016, Then have low as 5 posts? Make sure you get a crypter or even find a new one if you have one. You can get a free one but they really aren't reliable since AV companies can just use it and detect it faster.
[Image: aVctwXL.gif]

(Feb 7, 2016 12:34 AM)๖ۣۜJinx Wrote:  Is it strange to anyone that these two people both have joined on Feb 2016, Then have low as 5 posts? Make sure you get a crypter or even find a new one if you have one. You can get a free one but they really aren't reliable since AV companies can just use it and detect it faster.

I have a few Crypters that seem to not be doing the job but thanks for the advice.

(Feb 7, 2016 12:01 AM)StubbyJeff Wrote:  If it is detected by WD then it is not considered FUD, FUD stands for Fully Undetectable
try crypting it, if you have already crypted it, try it again, scan to test if your stub is FUD one one of these sites
avoid scanning it on virus total as they share their results IIRC

Scan.majyx.net
nodistribute.com
razorscanner
xcscanner.com

Okay, okay I get you.
I always that AVs and WD were to separate things.
there are many crypters in this forum you could use for that, did you do any reading at all?
(Feb 9, 2016 05:20 AM)Locochope Wrote:  there are many crypters in this forum you could use for that, did you do any reading at all?

I said I do have a few crypters on my hands but they seem to be getting outdated already, they worked maybe the first few days I got a hold of them and now I'm just thinking about investing into a Crypter.
I've also heard that many free Crypters here on HF are unreliable.
(Feb 9, 2016 05:30 AM)mosloF Wrote:  I said I do have a few crypters on my hands but they seem to be getting outdated already, they worked maybe the first few days I got a hold of them and now I'm just thinking about investing into a Crypter.
I've also heard that many free Crypters here on HF are unreliable.

It is not that they are unreliable, many do the job.fine, the problem is free gets over used and abused. This generic detections to the crypt happen faster making them less effective.
(Feb 9, 2016 06:02 AM)Armada Wrote:  It is not that they are unreliable, many do the job.fine, the problem is free gets over used and abused. This generic detections to the crypt happen faster making them less effective.

Just like the typical AV scanners that every HF user complains about correct? Creating complications with the algorithms used to correct the encryption?
When talking about this you have to understand how the viral definitions work, and how they are developed.
Vendors must first obtain a sample of the malware for analysis and then find a "constant" - something in the code of the malware that is unique only to that software, and unchanging. This being said, new crypts/fuds are required regularily as the fud encryption is usually where the detection comes from in one of two ways.
The av venders learn the cipher to read the payload file beyond the crypt. This results in the direct detection of the malware.
Or alternatively, depending on the type of encryption used, vendors might produce a generic detection for the crypt itself if they again find constants within the samples obtained.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by FractumSeraphFeb 22, 2015 06:18 PM 22 1,235 Feb 22, 2015 06:18 PM
Last Post: Cooldax
by UkVenoMMay 4, 2014 12:39 PM 0 77 May 4, 2014 12:39 PM
Last Post: UkVenoM
by LaVioladorJun 27, 2013 04:42 AM 9 239 Jun 27, 2013 04:42 AM
Last Post: Im gone brah