Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

How to avoid runtime detection when adding startup key to registry?

My crypter is FUD scantime but AVs like Kaspersky detect it when you run payload and as soon as it creates a registry key for startup persistence.

How do you achieve startup persistence without runtime detections?
Typically you don't use methods that are commonly used. If it's easily Google-able, then it's most likely on Kaspersky's watch list.

[Image: e456a9db6c01.jpg]
Edge of Nowhere
No place in particular.
u could bind your software to a startup one or search for auto execute regkeys and stuff like this
Try to add it as .lnk somehow. It will help
You have to check if the key already exist.
Try encrypting regedit paths. You can use ASCII.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by ZappiiiJul 12, 2025 05:09 AM 56 3,483 Jul 12, 2025 05:09 AM
Last Post: Wigxxxx
by waterpoloFeb 4, 2021 10:09 AM 1 229 Feb 4, 2021 10:09 AM
Last Post: Ren And Stimpy
by PhantomBladeJul 1, 2020 07:07 AM 2 157 Jul 1, 2020 07:07 AM
Last Post: Morphine