{"id":7280,"date":"2016-11-25T23:26:00","date_gmt":"2016-11-25T22:26:00","guid":{"rendered":"https:\/\/www.trucnet.com\/?p=7280"},"modified":"2016-11-25T23:26:00","modified_gmt":"2016-11-25T22:26:00","slug":"runpe-detector-1-0-5640-build-65324","status":"publish","type":"post","link":"https:\/\/www.trucnet.com\/en\/runpe-detector-1-0-5640-build-65324\/","title":{"rendered":"RunPE Detector 1.0.5640 build 65324"},"content":{"rendered":"

RunPE Detector is a security program that requires no installation, specifically designed to detect and eliminate certain suspicious processes. Phrozen Software has created a new way to detect and remove illegitimate remote access software (RAT).<\/p>\n

A closer look at malware\/viruses known as RATs:<\/strong><\/span>
\n(RAT stands for Remote Access Tool, but they are mainly used to build a botnet).
\nUnder the guise of computer administration and remote access programs (such as VNC or Teamviewer), these programs are distributed and used as Trojans.<\/p>\n

There are various RATs, one of the oldest is BlackShades, the most used is Darkomet or NanoCore.
\nRATs are sold but cracked versions can be found, tutorials (including videos on youtube) exist in abundance, therefore anyone, who has very little knowledge, can create their own Botnet (network of infected PCs).<\/p>\n

RATs operate in Client\/Server mode; you run a server and clients connect to it.
\nThe goal is to get the client-side component to execute without the PC user's knowledge in order to take control of the machine, which is generally quite simple, via social engineering, since the targeted individuals are usually not very computer savvy.<\/p>\n

Some common RATs (Remote Access Control):<\/span><\/strong>
\nNanoBot and MSIL:NANOCORE
\nMSIL\/IMMIRATE
\nBACKDOOR:WIN32\/XTRAT
\nTROJAN.CHICKIL
\nWORM:WIN32\/AINSLOT.A
\nMSIL\/OMANEAT<\/p>\n

The most virulent ones that bypass antivirus software:<\/span><\/strong>
\nBiFrose
\nBackdoor.Prorat
\nBackdoor.Cybergate
\nDarkoMet
\nBackdoor: Win32\/Fynloski<\/p>\n

\n

Configuration:<\/strong><\/span>
\n\u2013 Windows (x32\/x64 Bits): XP, Vista, 7, 8, 8.1, 10
\n\u2013 Processor: Pentium 4 3GHz
\n\u2013 RAM: 1 GB
\n\u2013 Disk space: 20 MB<\/p>\n

\n

Facility :<\/strong><\/span>
\nExecute : Detector.exe<\/strong><\/p>\n

\n

- Language :<\/strong><\/span> English
\n- Size<\/strong> <\/span>: 5.9 MB<\/p>\n

<\/i> DOWNLOAD Uptobox server<\/small><\/span><\/a><\/p>\n

<\/i> DOWNLOAD Server 1File<\/small><\/span><\/a><\/p>\n

<\/i> DOWNLOAD Mega Server<\/small><\/span><\/a><\/p>","protected":false},"excerpt":{"rendered":"

RunPE Detector is a security program that requires no installation, specifically designed to detect and eliminate certain suspicious processes. Phrozen Software has created a new way to detect and remove illegitimate remote access software (RAT). A closer look at the malware\/viruses known as [\u2026]<\/p>","protected":false},"author":1,"featured_media":7282,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_lmt_disableupdate":"no","_lmt_disable":"","_exactmetrics_skip_tracking":false,"footnotes":""},"categories":[8,1749],"tags":[2149,897,564,2916,2914,2912,2913,2051,131,2915,1986,898],"class_list":["post-7280","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-logiciels","category-securite","tag-analyser","tag-anti-malware","tag-logiciel","tag-malwares","tag-processus","tag-runpe","tag-runpe-detector","tag-scan","tag-securite","tag-supprimer","tag-trojan","tag-virus"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t