Virus in my tools ? No! Read here!

07/09/2013 16:40 YatoDev#1
yesterday there was that thread abot my pixelbot with a RAT included.
And all are flaming and hating.

[Only registered and activated users can see links. Click Here To Register...] <--- look that scan :o

So i want to show you why my bot looks like a virus!

First Step :
-Deleting Updater Source
-dont Require Admin Rights
-dont set process prioryties
-no obfuscation
[Only registered and activated users can see links. Click Here To Register...]

Second Step
-dont use UPX
-use normal Autoit Packer
-deleting win operations

[Only registered and activated users can see links. Click Here To Register...]

Third step :
-Deleting autoit signature

[Only registered and activated users can see links. Click Here To Register...]

So you can see there wasnt a virus in my .exe i dont know why so much users got infected by a RAT
07/09/2013 17:14 xasxm#2
lol, 28/47, i don't understand,why you say you do not have virus when in the analysis put there 28/47 my antivirus detect it as a trojan...

And I've done what it says in the tutorial and nothing I still detected as virus

PS: I use AVAST
07/09/2013 17:28 YatoDev#3
Quote:
Originally Posted by xasxm View Post
lol, 28/47, i don't understand,why you say you do not have virus when in the analysis put there 28/47 my antivirus detect it as a trojan...

And I've done what it says in the tutorial and nothing I still detected as virus

PS: I use AVAST
LOL :facepalm:

It isnt a tutorial !

I show that there are false positives in my .exe

I showed step by step what ive done that my .exe have 0 Virus detects.

I havent done anything that EPVP users have a RAT on their computers
07/09/2013 17:30 daswoll56#4
So if we downloaded your tool we have a RAT now? :O
07/09/2013 17:32 Requi#5
No. He showed why you don't have a RAT :D
07/09/2013 17:33 YatoDev#6
No

I saw this high ratio so i tested the .exe and put it in debuggers etc ....
First i thought there is a virus because in debuggers they show other informations than the original .exe but the fail was that the second download came from my webspace and the other from dropbox (file is deleted on dropbox thats why it mayby updates twice)

THERE IS NO VIRUS
07/09/2013 21:15 TheFallenAngel#7
you probably should consider some other packing and encryption methods. since these obviously give off high virus warnings.
07/09/2013 21:16 Ðaѓkšidé†#8
If its detected by anti virus & has more than 6 detections of trojans on it, its a virus/RAT etc.
Its the rule i follow.
07/09/2013 21:18 TheFallenAngel#9
Quote:
Originally Posted by Ðaѓkšidé† View Post
If its detected by anti virus & has more than 6 detections of trojans on it, its a virus/RAT etc.
Its the rule i follow.
then do not use his tools
07/09/2013 21:21 Ðaѓkšidé†#10
Quote:
Originally Posted by TheFallenAngel View Post
then do not use his tools
I never used it & don't plan on using it.
Just saying, its most likely infected with something.
07/09/2013 21:34 YatoDev#11
Quote:
Originally Posted by TheFallenAngel View Post
you probably should consider some other packing and encryption methods. since these obviously give off high virus warnings.
i use the normal autoit packer and obfuscation and my updater .. In this combination i cant get less ratio
07/09/2013 21:40 hello..#12
Sry for spam :)

[Only registered and activated users can see links. Click Here To Register...]
07/09/2013 22:45 YatoDev#13
Dont need to say sorry . better dont spam its easier :D

but your pic was a littpe bit funny
07/09/2013 23:04 YerAWizard#14
Flutter, I have the newest Norton 360 Premier Edition, and I don't see any virus, in your toosl. Why others say that they have virus in your tool/s .

Greetz,
jartsa.
07/09/2013 23:41 -popcorn-#15
the original tool has no virus, but when it's obfuscated, some antiviruses flag it as a virus, some don't, and it's not a virus, it's just that the antivirus can't "read" the code and say if it's or not a virus because it's obfuscated