PDA

View Full Version : Isn't this unpacking?


mrhero
May 13th, 2006, 08:08 PM
I sent a file from VBA32's Quarantine to Virustotal. Result is exciting i think. F-prot catch the code. But we know f-prot's unpacking isn't good.??? And why VBA32 says clean?

Marcos
May 14th, 2006, 01:06 AM
You cannot expect VBA or another scanner to scan inside its xored quarantine files.