Jump to content

[question-descusion]File crypter


Recommended Posts

Posted

Hello , i just posted here to ask you :

What do you think about a powerfull file cryper that could make your files undectable for the most (if not every) antiviruses!

Could that shit make sales ? or i should share it for free ?

 

(am coding it for over 2 weeks )

 

 

 

 

Posted

what's the point? The moment you decrypt the file the antivirus is scanning your memory and in no time it will detect the malicious file if any.

Besides, NOBODY would buy a tool that prevents antiviruses from scanning a file unless they have something to hide. ;)

Posted

what's the point? The moment you decrypt the file the antivirus is scanning your memory and in no time it will detect the malicious file if any.

Besides, NOBODY would buy a tool that prevents antiviruses from scanning a file unless they have something to hide. ;)

I know alot of people that the want to hide-spread , stealers , bots , keyloggers , ddosers etc and antiviruses dont let them.

So it would be usefull for many people ;)

Posted

**** EXAMPLE****

 

Before encryption :

 

File information

Report date: 2010-12-30 22:49:16 (GMT 1)

File name: test-virus-psomas-exe

File size: 348160 bytes

MD5 hash: 8b46893de6e30aef5145826b31a8cd5a

SHA1 hash: f65a67e6ec4994ba5f3b629465b8e553657099e7

Detection rate: 14 on 16 (88%)

Status: INFECTED

Antivirus Database Engine Result

a-squared 30/12/2010 5.0.0.20 Trojan-PWS.Win32.Dybalom!IK

Avast 30/12/2010 5.0

AVG 30/12/2010 9.0.0.725 Agent2.BRZM

Avira AntiVir 30/12/2010 7.6.0.59 TR/Spy.Gen2

BitDefender 30/12/2010 7.0.0.2555 Trojan.Generic.4111804

ClamAV 30/12/2010 0.96.2.1 Trojan.Spy-75681

Comodo 30/12/2010 4.0 TrojWare.Win32.PSW.Dybalom.~FAT

Dr.Web 30/12/2010 5.00.0 Trojan.Siggen1.39351

F-PROT6 30/12/2010 4.6.1.107 W32/Trojan2.MMBV

Ikarus T3 30/12/2010 1001084 Trojan-PWS.Win32.Dybalom

Kaspersky 30/12/2010 9.0.0.736

NOD32 30/12/2010 4.2.42.0 Win32/PSW.Fignotok.H

Panda 30/12/2010 10.0.3.0 Bck/Poison.F

TrendMicro 30/12/2010 9.120-1004 TSPY_FIGNOTOK.B

VBA32 30/12/2010 3.12.14.1 TrojanPSW.Dybalom.dhd

VirusBuster 30/12/2010 1.5.6 Trojan.PWS.Dybalom.Gen

 

Afer Encryption :

 

File information

Report date: 2010-12-30 22:58:41 (GMT 1)

File name: test-virus-psomas-exe

File size: 348160 bytes

MD5 hash: 8b46893de6e30aef5145826b31a8cd5a

SHA1 hash: f65a67e6ec4994ba5f3b629465b8e553657099e7

Detection rate: 1 on 16 (6% )

Status: INFECTED

Antivirus Database Engine Result

a-squared 30/12/2010 5.0.0.20

Avast 30/12/2010 5.0

AVG 30/12/2010 9.0.0.725

Avira AntiVir 30/12/2010 7.6.0.59

BitDefender 30/12/2010 7.0.0.2555

ClamAV 30/12/2010 0.96.2.1 Trojan.Win32/Crypt

Comodo 30/12/2010 4.0

Dr.Web 30/12/2010 5.00.0

F-PROT6 30/12/2010 4.6.1.107

Ikarus T3 30/12/2010 1001084

Kaspersky 30/12/2010 9.0.0.736

NOD32 30/12/2010 4.2.42.0

Panda 30/12/2010 10.0.3.0

TrendMicro 30/12/2010 9.120-1004

VBA32 30/12/2010 3.12.14.1

VirusBuster 30/12/2010 1.5.6

Posted

You're an idiot.Look what I wrote again.I said  'What's the point of encrypting a file from an antivirus, rendering it useless, since the moment it gets decrypted it passes to RAM making it 'scannable' from the antivirus?'. So it's COMPLETELY USELESS.

Posted

You're an idiot.Look what I wrote again.I said  'What's the point of encrypting a file from an antivirus, rendering it useless, since the moment it gets decrypted it passes to RAM making it 'scannable' from the antivirus?'. So it's COMPLETELY USELESS.

Well when you making an encrypted virus, not a virus joke that psomas making. you also code some parameters make him invisible in the victim's system. This is up to the virus, the encrypt part is just to make him seems "safe" till you open it.

Posted

that's what I say until opened, then antivirus detects and blocks the virus. Anyway executable viruses are not much of a threat I believe. That I say without having any knowledge on the matte, but clearly if you execute files you trust then no executable virus will ever harm your system.

Posted

Just to make it clear and inform noob psomas.

Invaders punished by law. You kido will mess up when you follow these tutorials.

 

that's what I say until opened, then antivirus detects and blocks the virus.

No, it's not, also it's to late. The only thing that anti-virus can do is to INFORM you when someone trying steal your coockies, like this "Do you really want to go on opening the coockies?".

 

 

Anyway executable viruses are not much of a threat I believe. That I say without having any knowledge on the matte, but clearly if you execute files you trust then no executable virus will ever harm your system.

Every virus can damage your pc and your psychology.. It's not the best thing knowing that someone got into your personal files etc, either you are dumb.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now


×
×
  • Create New...

AdBlock Extension Detected!

Our website is made possible by displaying online advertisements to our members.

Please disable AdBlock browser extension first, to be able to use our community.

I've Disabled AdBlock