A forum for reverse engineering, OS internals and malware analysis 

Forum for completed malware requests.
 #5132  by xqrzd
 Tue Feb 22, 2011 2:25 am
Here are a couple of the fake AV's I mentioned on the blog comments. Avast reports them as Morphex. They are about 10 days old.

edit: I attached fakeAV2.rar, which contains 2 newer samples. They are not flagged as Morphex, but I think packer was just updated and avast hasn't updated yet.
edit again: Here is one more fake av pcupdate107_289.exe (this one is in vb) but I think it is still packed with Morphex.
Attachments
(237.96 KiB) Downloaded 65 times
pass is malware
(753.55 KiB) Downloaded 69 times
pass is malware
(509.22 KiB) Downloaded 83 times