search

bytecode77 / r77-rootkit

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
https://bytecode77.com/r77-rootkit
BSD 2-Clause "Simplified" License
1.59k stars 389 forks source link

Compiling project creates large Install.exe file and it causes errors. #14

Closed uncidal closed 3 years ago

uncidal commented 3 years ago

Hey, so I downloaded the master branch and tried to compile it (in visual studio right clicking the solution and clicking build solution), under compiling there was no errors, but the Install.exe file is very big (2,178KB), compared to the one I installed from bytecode77.com (311kb). And whenever I open the Install.exe I compiled I always get Application Errors from other applications saying something like "The instruction at 0x referenced memory at 0x. The memory could not be read." and a lot of applications close, like visual studio, PerfWatson2.exe and my own program if its open (I get these errors both when I run it with RunPE and if I run it from file explorer). (But after those applications have closed and the Errors are done I am pretty sure it does what its supposed to).

The Install.exe I got from bytecode77.com always runs fine, I can run it with your RunPE code in another program with no problems, I can also run it straight from file explorer. Never had any issues with it. But when I compile it myself it is not the same, I don't have a lot of experience using other peoples projects, so there might be something I missed. I didn't change anything, just download it and opened in visual studio and compiled.

bytecode77 commented 3 years ago

It seems like you are compiling with Debug settings. However, r77 only works properly when compiled with Release.

image

uncidal commented 3 years ago

Yep that fixed it, thanks :)