[naxster]

Hello guys!

I have never have this problem before, this is the first time actually :O

I'm trying to create a RAT using njRAT to make the RAT autostart when i reboot the computer.
In njRAT i have ticked "Copy" and the directory path is in %TEMP% option and "Copy to StartUp" and "Registry StartUp".

On my other laptops i've tried this it works great... Well kinda... I get like 1000 popups from Windows Defender, even though it's crypted, but as soon as i allow it, it works great.

But i'm trying on my desktop computer and i for some reason the %TEMP% folder is always empty when i reboot the computer...

I mean i can see the RAT in there its in folder "Temp/2/RATname.exe"... And i'm also connected to the RAT in njRAT, everything works great but as soon as i reboot the computer it's gone and i have to open the Server.exe again...

Do you guys know why this happens? I haven't had any problems before, this is the first time...

[NERO]

Windows defender or other anti-virus is deleting it on reboot.

Crypt your stub then try again.

[naxster]

Windows defender or other anti-virus is deleting it on reboot.

Crypt your stub then try again.

I only have Windows Defender on, but I have allowed it many times, I also made exception for the temp folder still nothing..

I don't actually need super good crypter since it's my own computer, but I won't Windows defender to remove it everytime I reboot it. With my 2 other laptops it's working great and they all have Windows 10 :/

[NERO]

Doesn't matter if allowed win defender will still delete it.

[#Natasha]

I only have Windows Defender on, but I have allowed it many times, I also made exception for the temp folder still nothing..

I don't actually need super good crypter since it's my own computer, but I won't Windows defender to remove it everytime I reboot it. With my 2 other laptops it's working great and they all have Windows 10 :/

Whitelist folder ...