(04-12-2013, 09:32 AM)ReTi0n Wrote:

(04-12-2013, 09:15 AM)Psycho_Coder Wrote:

(04-12-2013, 08:57 AM)ReTi0n Wrote: Thank you very much sir, its prety analitical and I'm sure it will keep me busy for sometime but after that I will probably be able to write my program...

-I am not trying to write a keylogger in face, I thought of this but i think its very difficult for me so making a background program (most likely a virus;D ) that will copy info from the registry will show me which antivirus and version of it the victim has. After this I will sent an email with a zip backdoor (that I know the victim's antivirus wont detect) and when he opens the program in the email BOOM . I got him.

First of all , Don't call me sir , I am a student and at HC I learn from others ,
Secondly , Programs like you're are willing to do , can be detected by an antivirus as a trojan , so you might need to do something that will make it undetectable ,

You can use Confuser application , change the assembly info and change Icons , this will help making it undetectable .

One more thing use the code tags for posting any code , now edit your post and give the code tags.

Well Im a student too but I dont really have your experience...
Fixed the code.

I thought that if you write your own simple keylogger for example all antiviruses wont detect it because you are the only one using it and antiviruses wont have a signature for it??? Isnt this true?

(04-12-2013, 10:08 AM)Psycho_Coder Wrote:

(04-12-2013, 09:32 AM)ReTi0n Wrote:

(04-12-2013, 09:15 AM)Psycho_Coder Wrote:

(04-12-2013, 08:57 AM)ReTi0n Wrote: Thank you very much sir, its prety analitical and I'm sure it will keep me busy for sometime but after that I will probably be able to write my program...

-I am not trying to write a keylogger in face, I thought of this but i think its very difficult for me so making a background program (most likely a virus;D ) that will copy info from the registry will show me which antivirus and version of it the victim has. After this I will sent an email with a zip backdoor (that I know the victim's antivirus wont detect) and when he opens the program in the email BOOM . I got him.

First of all , Don't call me sir , I am a student and at HC I learn from others ,
Secondly , Programs like you're are willing to do , can be detected by an antivirus as a trojan , so you might need to do something that will make it undetectable ,

You can use Confuser application , change the assembly info and change Icons , this will help making it undetectable .

One more thing use the code tags for posting any code , now edit your post and give the code tags.

Well Im a student too but I dont really have your experience...
Fixed the code.

I thought that if you write your own simple keylogger for example all antiviruses wont detect it because you are the only one using it and antiviruses wont have a signature for it??? Isnt this true?

Note :- Color tags won't work with code tags so you better remove them.

Now read this and this

The second link will help you hiding your keylogger .

An antivirus is a piece of software specifically designed to detect viruses or trojan horse etc. on a computer,but anti virus software do not consider certain keyloggers a virus, as under some circumstances a keylogger can be considered a legitimate piece of software.So ,yes if you have your own keylogger then it might not get detected , but some antiviruses read the binary data of your exe and also can detect the keyhooks that are getting logged . For such situations you should use a crypter .Many anti-spyware applications are able to detect some software keyloggers and quarantine, disable or cleanse them. However, because many keylogging programs are legitimate piece of software under some circumstances, anti spyware often neglects to label keylogging programs as spyware or a virus. These applications are able to detect software-based keyloggers based on patterns in executable code, heuristics and keylogger behaviours (such as the use of hooks and certain APIs).

(04-12-2013, 10:25 AM)ReTi0n Wrote: I know how to use a crypter or a blinder. I also know that these programs (or at least their public versions) are not perfect and they are still getting detected by a lot of antiviruses.

(04-15-2013, 07:36 AM)ArkPhaze Wrote: Define "runs in the background."

How much "in the background"? Also, why copy all installed programs into a variable (string filepaths I'm assuming) when you can probably just loop the running processes? An AV will probably be running all the time, so you shouldn't have to retrieve all the installed programs...

(04-15-2013, 07:36 AM)ArkPhaze Wrote: Define "runs in the background."

How much "in the background"? Also, why copy all installed programs into a variable (string filepaths I'm assuming) when you can probably just loop the running processes? An AV will probably be running all the time, so you shouldn't have to retrieve all the installed programs...

(04-16-2013, 12:26 AM)ArkPhaze Wrote: The Process class from the System.Diagnostics namespace has static/Shared methods that would allow you to retrieve all the running processes. From that, you can grab their name, PID, or whatever else you might need from them.

(04-16-2013, 12:26 AM)ArkPhaze Wrote: The Process class from the System.Diagnostics namespace has static/Shared methods that would allow you to retrieve all the running processes. From that, you can grab their name, PID, or whatever else you might need from them.