Isn't this unpacking?

Discussion in 'other anti-virus software' started by mrhero, May 13, 2006.

Thread Status:
Not open for further replies.
  1. mrhero

    mrhero Registered Member

    Joined:
    Jul 15, 2005
    Posts:
    297
    Location:
    Ankara , Turkey
    I sent a file from VBA32's Quarantine to Virustotal. Result is exciting i think. F-prot catch the code. But we know f-prot's unpacking isn't good.o_O And why VBA32 says clean?
     

    Attached Files:

  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    You cannot expect VBA or another scanner to scan inside its xored quarantine files.
     
Thread Status:
Not open for further replies.