Pages

Crypters

A Crypter is usually used to encrypt files like viruses, rats, and keyloggers for the sole purpose of bypassing anti-virus detection.

What does FUD mean?

FUD stands for – Fully Undetected or Fully Undetectable
Whats the difference between a Runtime and Scantime Crypter?

A Runtime Crypter encrypts the specified file and when executed (ran), it is decrypted in memory. This way anti-viruses aren’t able to analyze the file before executed and after executed.

A scantime Crypter encrypts the specified file so anti-viruses aren’t able to analyze the file only before executed but NOT when executed.


How do i know what anti-viruses detect a file?


There are many sites with this same purpose of scanning files and giving a report of which anti-viruses detect it. The main issue leading to crypters becoming detected is because if you scan a crypted file on some of these scanner sites, the crypted file will be distributed to the anti-virus vendors, thus causing the crypted code overwritten on your file to become detected, which in turn causes your crypter to turn out detected.

It is recommended to scan all files you crypt on NoVirusThanks – while making sure the “do not distribute sample” checkbox is checked! 


What is EOF and what is it used for?

EOF stands for End Of File. Some files like Bifrost, Medusa, and Cybergate require the end of file data in order to run without corruption, So If Crypters Don’t Preserve this end of file data your crypted file will become corrupt.

What is a USG?


A USG is part of a crypter that generates a unique version of the stub (part of crypter used to encrypt and decrypt the specified file). The purpose of this is because FUD crypters don’t last forever and eventually crypters become detected after a period of time.

No comments:

Post a Comment