Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: The reason why "Pangolin is backdoor"
From: "Razi Shaban" <razishaban () gmail com>
Date: Thu, 27 Mar 2008 15:32:10 +0200

Wow! Cryptors prevent viruses from being detected?

Who would have thought!


--
Razi


On 3/27/08, zwell.nosec <zwell.nosec () gmail com> wrote:
Pangolin really is a backdoor? Let's do this step to make sure:
 1.Download UPX from upx.sf.net
 2.In cmd shell, run "upx.exe -d pangolin.exe"
 3.Upload the new pangolin.exe(actually the origin) to virustotal
 4.Check the result again
 I do these, and the result is:
 http://www.virustotal.com/analisis/b9d55c751d5eed7b34cda3fe708b1bd7

 We can see
 Kaspersky,Sophos,F-Secure,CAT-QuickHeal,F-Prot,Ikarus,AntiVir,Prevx1,TheHack
 er,Webwasher-Gateway will not alert any more.

 You judge what is it! Or maybe we should think about what does these
 Antivirus do???

 Thanks ;)

 _______________________________________________
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]