[AceVoid]

Shocking really. Now to see Razor's reply on this. This is going to be full out war!

[franzl]

I am not 100% sure how this works, but could it be any of the AV's doing it by default? If so, they'd have to get rid of whichever AV scanners doing that.

I mean, the file must be distributed to every AV scanner, which would fetch information about the file scanned.

It looks to me like the file was executed on a virtual machine. Would an AV scaner execute the file? I think not. But I'm not sure too.

[D‏‎elet‏‎e]

Or maybe, just maybe, someone scanned on virustotal with your crypter?

[M3g4J1v3x]

Or maybe, just maybe, someone scanned on virustotal with your crypter?

How would that even work? Even if 1000 people scanned on VT, it wouldn't connect because its not my server being encrypted :P

[BоwseR]

Nice find man yeah im waiting to see what he says in his post about this but I have not seen him post yet and its been open for a while now.

[чистая душа]

It looks to me like the file was executed on a virtual machine. Would an AV scaner execute the file? I think not. But I'm not sure too.

Dude, yes an av scanner would run it on a virtual machine. it's how they tell what the file does.

[M3g4J1v3x]

It looks to me like the file was executed on a virtual machine. Would an AV scaner execute the file? I think not. But I'm not sure too.

Most AV scanners do not execute the file(s).
But a malware researcher would ;)

---

Dude, yes an av scanner would run it on a virtual machine. it's how they tell what the file does.

Actually no. The AV scans the file(s) without execution.

Because it would take days to scan the files runtime for all those AV's. :P

[franzl]

Dude, yes an av scanner would run it on a virtual machine. it's how they tell what the file does.

Do you say that multiscanners execute the file? Like a runtime/scantime scan?

[FractumSeraph]

Does anyone else have an account there? If so, just make a new server (COMPLETELY NEW, NEVER USED BEFORE) Make it identifiable as a test server for this, and scan it there and see if it happens to you. I don't have an account or I would do it myself.

[franzl]

[b]Most AV scanners do not execute the file(s).
But a malware researcher would ;)

Thanks. Thats what I thought. Your remote desctop screenshot reminds me on a screenshot I made from anubis or malwr.com.

Thanks for the warning. 🤝
I was going to use this scanner in the next days.

---

[FractumSeraph]

Thanks. Thats what I thought. Your remote desctop screenshot reminds me on a screenshot I made from anubis or malwr.com.

Thanks for the warning. 🤝
I was going to use this scanner in the next days.

---

I have an account. You can send your server to me.

Sure thing, I'll make one really quick.

['BlackBone]

All Famous Scanners work that way, so no need to get shocked.
you run a big anti virus scanning, you get an offer from an AV company.
Im sure that the company has executed the virus by accident.
so anyways normally you would take the money to distribute the samples as per request..
I never scanned my server on any scanning site, making it last longer.

[Theboyz99]

I guess i gotta find a new scanner now:/

[3xp1r3]

Yes I know That From A Long Time That RazorScanner Distribute Samples To ESET. 100% Sure...

[Razοr]

Yeah pictures of 3 random bots some did take definitely proof that we are distributing, great job op. Most likely just the same guy that tried to trash us last time.

---

Does anyone else have an account there? If so, just make a new server (COMPLETELY NEW, NEVER USED BEFORE) Make it identifiable as a test server for this, and scan it there and see if it happens to you. I don't have an account or I would do it myself.

Feel all free to do so :) RazorScanner has 20k users let's see if we can find more then 1 guy trying hard.