Isn't this unpacking?

Discussion in 'other anti-virus software' started by mrhero, May 13, 2006.

Thread Status:
Not open for further replies.
  1. mrhero

    mrhero Registered Member

    Joined:
    Jul 15, 2005
    Posts:
    297
    Location:
    Ankara , Turkey
    I sent a file from VBA32's Quarantine to Virustotal. Result is exciting i think. F-prot catch the code. But we know f-prot's unpacking isn't good.o_O And why VBA32 says clean?
     

    Attached Files:

  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,456
    You cannot expect VBA or another scanner to scan inside its xored quarantine files.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.