Anvilpoint CyberOps - Hacker for Hire ◆ ProxiesFood: Unlimited Residential Proxy ◆ Spoof Call and Spoof SMS set any caller ◆ Cheap KYC Verifications & Openups ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Tech Coding Software Development › [.NET] Avast detecting crypted server as MSIL

New Reply 
.NET 

Avast detecting crypted server as MSIL
shutdownnow
shutdownnow Offline
[n00b@HF:]
*
Registered
Posts:
42
Threads:
7
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Aug 6, 2016 12:55 PM
I managed to make my crypter 5/35, how can I remove this "MSIL" detection of avast? What trigger it?
Scan results: nodistribute. com/result/7V5MxlgLb8SfHCnGjhN1OcYo
javdu10
javdu10 Offline
[n00b@HF:]
*
Registered
Posts:
81
Threads:
8
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Aug 6, 2016 02:51 PM (This post was last modified: Aug 6, 2016 02:53 PM by javdu10.)
MSIL seems to be the runPe, try to change variable names of your RunPe or change the storage methode (I just read it somewhere that sometimes its the "storage method of the runPe" ) that get detected, but I have no idea how it work..
shutdownnow
shutdownnow Offline
[n00b@HF:]
*
Registered
Posts:
42
Threads:
7
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Aug 6, 2016 05:19 PM (This post was last modified: Aug 6, 2016 05:19 PM by shutdownnow.)
(Aug 6, 2016 02:51 PM)javdu10 Wrote:  MSIL seems to be the runPe, try to change variable names of your RunPe or change the storage methode (I just read it somewhere that sometimes its the "storage method of the runPe" ) that get detected, but I have no idea how it work..

Thanks, what would you do to change the storage way? Right now i do it with Resources
javdu10
javdu10 Offline
[n00b@HF:]
*
Registered
Posts:
81
Threads:
8
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Aug 7, 2016 03:28 AM
(Aug 6, 2016 05:19 PM)shutdownnow Wrote:  Thanks, what would you do to change the storage way? Right now i do it with Resources

I don't even know at this time i'm trying to have a runPe working a crypter
but I need time to understand how it work 😭
_Devil
_Devil Offline
[closed@HF:]
Posts:
593
Threads:
6
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Aug 7, 2016 04:51 AM
(Aug 6, 2016 05:19 PM)shutdownnow Wrote:  Thanks, what would you do to change the storage way? Right now i do it with Resources

for .net file there is mainly 3 storage method from 1 is detected and for other you need to work out to get it FUD.
EOF storage (Detected)
Native Resource
Managed Resource (the one you use)
ScammerHD
ScammerHD Offline
[user@HF:]
*
Registered
Posts:
295
Threads:
13
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Aug 7, 2016 03:45 PM
Try to change the PE Headers, if you haven't done already. It's very strange for a Program to have a .exe in its resources, so it's often detected.
shutdownnow
shutdownnow Offline
[n00b@HF:]
*
Registered
Posts:
42
Threads:
7
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Aug 8, 2016 03:41 AM (This post was last modified: Aug 8, 2016 03:41 AM by shutdownnow.)
(Aug 7, 2016 04:51 AM)_Devil Wrote:  for .net file there is mainly 3 storage method from 1 is detected and for other you need to work out to get it FUD.
EOF storage (Detected)
Native Resource
Managed Resource (the one you use)

Thanks, but why is it than detected?

(Aug 7, 2016 03:45 PM)ScammerHD Wrote:  Try to change the PE Headers, if you haven't done already. It's very strange for a Program to have a .exe in its resources, so it's often detected.

It isn't a exe, its a txt with AES encrypted exe in it
CoLDarkness
CoLDarkness Offline
[user@HF:]
*
Registered
Posts:
249
Threads:
28
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Aug 11, 2016 01:34 AM
just comment out segmentations of your code one by one and scan again, you'll see what it detects.
shutdownnow
shutdownnow Offline
[n00b@HF:]
*
Registered
Posts:
42
Threads:
7
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Aug 11, 2016 09:08 AM
(Aug 11, 2016 01:34 AM)CoLDarkness Wrote:  just comment out segmentations of your code one by one and scan again, you'll see what it detects.

Thanks
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by daarioJun 9, 2024 04:14 PM 10 301 Jun 9, 2024 04:14 PM
Last Post: Tyr
[C#] by BahNahNahMay 19, 2021 09:48 AM 15 1,341 May 19, 2021 09:48 AM
Last Post: pinterkoding
[C#] by Anon?M IDSep 29, 2018 02:45 PM 8 318 Sep 29, 2018 02:45 PM
Last Post: darkscrpion