Trojans 

Well.. I prefer using Dark Comet 4, it has been recently released and has fully undetectable features n stuff like that, there is a Mac version coming soon.
http://www.darkcomet-rat.com/

Thanks both of you for the info. I'll definatly try DC.

p0et, Thanks! thats actually one of the things i'll be testing, how well the AV on the vm detects the malware. Unfortunately I couldnt get MSE or AVG to install on the XP SP0 host...

Also thanks for the advice!

I will eventually, but im trying to get away from the point, click, exploit design of MSF, even through the console. I think im going to dl DC, use eLiTeWrap to wrap it with calc.exe and go from there. I'll need to find out how to install NMAP on the "remote" host via command line... Im sure ill figure it out.

Sub7, no. It's like 10 years old. Majic PS, sounds too much like it includes a hidden trojan. Prorat? It's usable and okay. Same with Poison Ivy.

If you really have to use any of these trojans, you could try Turkojan as well. And then use Thermida to pack it as that would make it a lot harder to disassemble.

You do however, not need to use a "cryptor application". That "no antivrus can against them" is also untrue, as most public "crypters" are usually highly detectable except completely new ones.

Let's say you want something that actually uses new methods, one that does this, is Abyssec's crypter: http://www.abysssec.com/blog/2011/09/25/bypassing-all-anti-virus-in-the-world-good-bye-detection-hello-infection/ (And they're even a real company.)

A decent trojan a lot of hacker groups used a while back was Shark:
http://forum.intern0t.net/hacking-tools-utilities/217-shark-3-1-a.html
(Please note the InterN0T community does not condone unethical hacking.)

And for the sake of this thread, here's a cool proof of concept that has nothing to do with regular RAT's:
http://forum.intern0t.net/hacking-tools-utilities/1324-skypetrojan.html


Edit / Update
Bypassing Anti-Virus Scanners like a Pro:
http://forum.intern0t.net/offensive-guides-information/2775-blackpaper-bypassing-anti-virus-scanners.html

That paper only shows how to bypass signature based scanners, but play enough with a detected executable file, and you'll eventually end up with a fully undetectable file and that's even WITHOUT encrypting, packing or encoding it.

Remember that simple ncx99.exe backdoor which spawns a netcat process listening on port 99? I made that completely undetectable once, even against heuristic scanners.

Not because I used it for anything, just for the research fun to see how long it would take. (Approximately 1½ evening after work.)

I have no doubt you will, SephStorm...

Time, effort, dedication, and that ever-present will to 'try harder'!

Speaking of Trojan's..  just in case you missed it, here's a good example of an old one (PoisonIvy) which was modified to get around modern defenses, it seems. 

http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,8095.msg43992/topicseen,1/#new