Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Im trying to pack an Executable using an Exe Packer like UPX.I packed and checked the File with VirusTotal.com.Here some 9 Antivirus Products say its a Virus actually its a harmless exe.I think the AV Engines which are bases on Ikarus has problems like this. Why can't they check the file properly using better techniques before flagging it as a virus.

share|improve this question
    
What "better techniques" would you suggest? –  bobince Jun 26 '12 at 7:07
add comment

2 Answers 2

up vote 2 down vote accepted

I believe some of them will label it as a virus because they can potentially be "decompression bombs" also known as a "zip bomb" which will overload memory when trying to be unpacked. It may not be true that it is a decompression bomb but Avast says that it hard to detected resulting in some false positives.

share|improve this answer
add comment

Kaspersky and Nod32 have unpackers for them. Some other are just lazy to do so and insted they lable it as a hack tool. You can try diffrent packers that they don't detect or just rar your exe instead.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.