[Electronicz]

Hello Hack Forums Community,

i did downloaded a free crypter project and tried to refud it.
Now it got from 25/55 Detections to 5/55 Detections.
My main problem is Avira ( TR/Dropper.Gen) and i dont know how to solve it.
There are other problems too like ESET NOD32 (Trojan.MSIL/Injector.CKR), Ikarus Security ( Trojan.MSIL.Injector), Kaspersky Antivirus (HEUR:Trojan.Win32.Generic) and Avast (MSIL:GenMalicious-R [Trj]).

Please help me, i dont know how to bypass it.

[Zeth0s]

55 Detections looks like Virustotal so you will not get it FUD...

[Electronicz]

55 Detections looks like Virustotal so you will not get it FUD...

Stop hunting posts, i dont use virustotal.

[Slavoj Žižek]

the injector detections will be resolved by changing how you call the RunPE

the avira detection is more than likely your data storage method or using UnFUD public code like assembly.load(bytes)

they seem to be pretty easy detetions to bypass

[VisualSoft]

Like the above user said, its mostly from storage method.

[Cecilia]

Don't use .GetMethod/.GetMethods/.GetType/.GetTypes/.Load

Enjoy your no-avira detection.
Gen2 is generally the getmethod/shit
Gen is generally assembly.load/appdomain.load.
Get creative.

[AtiPLS]

Hello Hack Forums Community,

i did downloaded a free crypter project and tried to refud it.
Now it got from 25/55 Detections to 5/55 Detections.
My main problem is Avira ( TR/Dropper.Gen) and i dont know how to solve it.
There are other problems too like ESET NOD32 (Trojan.MSIL/Injector.CKR), Ikarus Security ( Trojan.MSIL.Injector), Kaspersky Antivirus (HEUR:Trojan.Win32.Generic) and Avast (MSIL:GenMalicious-R [Trj]).

Please help me, i dont know how to bypass it.

Injector detections mostly from runpe

[breaker1911]

remove some trashcode, it's caused by pump.

[Blas1986]

Have you tried to use ObfuscatorEX?
You can always try to write to companies for add your software to whitelist (just explain them, its good tool).
Would be nice if you wil be allow to sign your code with code signing, it also remove a lot of detection results.

[Delirium™]

Have you tried to use ObfuscatorEX?
You can always try to write to companies for add your software to whitelist (just explain them, its good tool).
Would be nice if you wil be allow to sign your code with code signing, it also remove a lot of detection results.

You're an idiot for 4 reasons.

1) There's no such thing as ObfuscatorEX, ConfuserEx most likely.
2) Using an obfuscator to bypass detections for crypters is the best way to ruin an obfuscator and cause false-positives to a great number of legit applications that use it.
3) Sure, e-mail Avira and tell them "pls whitelist my crypter - it's a good tool". Did you even read the thread?
4) You decided your first post on HF should contain advice to ruin something.

[SIM-2626129]

Storage method in combination with Assembly calling causes Dropper detection. For example, I'm using my private storage method and using the most abused method to call an assembly method from memory and still, I'm FUD. It's all about combinations.

[Securifier]

Try to renames some functions names and modify the Runge.

[medocodersea]

opps try this in
'Public Function medoff(ByVal b As String, ByVal data() As Byte)

' Return Interaction.CallByName(, b, CallType.Method, data)
'End Function
'Public Function medo1(ByVal ob As Object, ByVal str1 As String)
' Return Interaction.CallByName(ob, str1, CallType.Get)
'End Function
'Public Function medo2(ByVal ob3 As Object, ByVal str2 As String)
' Return Interaction.CallByName(ob3, str2, CallType.Method, 0, Nothing)

'End Function

[robwilliams464]

You're an idiot for 4 reasons.

1) There's no such thing as ObfuscatorEX, ConfuserEx most likely.
2) Using an obfuscator to bypass detections for crypters is the best way to ruin an obfuscator and cause false-positives to a great number of legit applications that use it.
3) Sure, e-mail Avira and tell them "pls whitelist my crypter - it's a good tool". Did you even read the thread?
4) You decided your first post on HF should contain advice to ruin something.

Epic response!!😁😁😁

[cking]

I had same problem but was resolved after changing my function names