[Full-disclosure] The reason why "Pangolin is backdoor"

zwell.nosec zwell.nosec at gmail.com
Thu Mar 27 13:19:02 GMT 2008


Pangolin really is a backdoor? Let's do this step to make sure: 
1.Download UPX from upx.sf.net 
2.In cmd shell, run "upx.exe -d pangolin.exe" 
3.Upload the new pangolin.exe(actually the origin) to virustotal 
4.Check the result again 
I do these, and the result is: 
http://www.virustotal.com/analisis/b9d55c751d5eed7b34cda3fe708b1bd7 

We can see
Kaspersky,Sophos,F-Secure,CAT-QuickHeal,F-Prot,Ikarus,AntiVir,Prevx1,TheHack
er,Webwasher-Gateway will not alert any more. 

You judge what is it! Or maybe we should think about what does these
Antivirus do??? 

Thanks ;)




Full-Disclosure is hosted and sponsored by Secunia.