I Did A Test: Some AV Software Just Report Shells

Discussion in 'other anti-virus software' started by aluckystar, Feb 6, 2007.

Thread Status:
Not open for further replies.
  1. aluckystar

    aluckystar Registered Member

    Joined:
    May 30, 2006
    Posts:
    66
    Location:
    Paris of the East
    I tested a Hupigon (packed with 6 shells) on VirusTotal and I found that many antivirus software ( like Antivir,AVAST,Bitdefender,CAT,Kaspersky) can't recognize it. They can just report the shell. I tried a Nimda (packed with 12 shells), and I got the same result. Can somebody tell me why ?

    ~removed virustotal attachment per this policy - Ron~
     
    Last edited by a moderator: Feb 6, 2007
  2. Sjoeii

    Sjoeii Registered Member

    Joined:
    Aug 26, 2006
    Posts:
    1,240
    Location:
    52?18'51.59"N + 4?56'32.13"O
    First of all maybe you can try the most recent Kaspersky engine?
    I see 4.??

    Maybe that's the issue why it's reported it like that:D
     
  3. solcroft

    solcroft Registered Member

    Joined:
    Jun 1, 2006
    Posts:
    1,639
    I don't see why you say that many scanners can't detect your repacked sample. VT seems to show quite a lot of scanners picking it up.
     
Loading...
Thread Status:
Not open for further replies.