PDA

View Full Version : I Did A Test: Some AV Software Just Report Shells


aluckystar
February 6th, 2007, 05:17 AM
I tested a Hupigon (packed with 6 shells) on VirusTotal (http://www.virustotal.com) and I found that many antivirus software ( like Antivir,AVAST,Bitdefender,CAT,Kaspersky) can't recognize it. They can just report the shell. I tried a Nimda (packed with 12 shells), and I got the same result. Can somebody tell me why ?

~removed virustotal attachment per this (http://www.wilderssecurity.com/showpost.php?p=818225&postcount=2) policy - Ron~

Sjoeii
February 6th, 2007, 05:25 AM
First of all maybe you can try the most recent Kaspersky engine?
I see 4.??

Maybe that's the issue why it's reported it like that:D

solcroft
February 6th, 2007, 05:50 AM
I don't see why you say that many scanners can't detect your repacked sample. VT seems to show quite a lot of scanners picking it up.