Well, after some research, I found a program that Microsoft itself has made - iExpress. In my opinion, iExpress is the best binder there can be, and if you know how to use it well, it can help ALOT in keeping your client file undetectable. Okay, first thing first. iExpress is for all Windows computers, even the earliest versions. Its very easy to use, with a simple GUI, and understandable. It makes a setup of a program with the files you include, with a final step of making it an .EXE.
Now, lets get started with this tutorial, beeches.
Now, of course your going to make a new file, so just leave the setting as it is. Simply click next for this part.
Same thing for this one; I would leave the settings for it the same way it is, unless you would really want to extract the files only, or make ActiveX installs out of them. Running them right away will lessen the suspicious level of the program.
Enter whatever you want for the package title, preferably the title of the program your going to bind your client with. If you keep default on the next steps that I provide you with, it won't matter what you put in this box.
Leave this as it is. Don't make a confirmation prompt open up, because it will most likely alert the user because of the prompt of your client being visible.
This is the prompt where it asks you what files you would like to bind. So, input the files you have and go to the next step.
This step is extremely important. Do not put your client first, because the installer (iExpress) won't open the next program until your client exits. So, basically saying, If you would bind a .rar file, the client won't open until it sees the .rar is gone. This is helpful because some victims always look at their process lists when opening files, to see if any suspicious files open with the program. Once they exit the .rar or whatever file you provide, your client will open.
Keep this option as default. The program will be displayed on default. If your client runs hidden, this won't apply to it; it will still be hidden when ran.
Make sure both boxes are checked because an open CMD with running actions (the extraction) would be very suspicious to the slave, even more when they see that there's 2 files being extracted.
Just put no restart, unless the program you binded with requires a restart. MAKE SURE you don't put 'always restart' because it will just mess up your client file.
This won't be visible to your slave when they run the file; it's just a prompt showing you that it's binding them together.
Let's hope this tutorial helped you guys find an alternative to binders that make viruses in your virus (ironic in my opinion). Finally, i'll share some of my tools and icons I use day to day.
Icon Changer
Available for users only
Icon Package
Available for users only
