search

bytecode77 / r77-rootkit

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
https://bytecode77.com/r77-rootkit
BSD 2-Clause "Simplified" License
1.55k stars 383 forks source link

Changing the prefix #47

Closed Sockd08 closed 10 months ago

Sockd08 commented 10 months ago

Where is the prefix located in the code? I want to change the prefix so it hides files that start with ÷77 or smth like that

bytecode77 commented 10 months ago

In GlobalAssemblyInfo.cs and r77def.h

Then recompile the solution and you're done.