Detected and not detected, that is the question!

Well file was detected here: http://urlquery.net/report.php?id=4153387
Took the code of the executable from jsunpack and saved it as a test txt file
and then uploaded it to VT, 0 detection: https://www.virustotal.com/nl/file/ce1f4ae99fcb69ab623adc5a551378e5c53a2fc370ea54c248bfe39e89d0a019/analysis/1375047124/

polonus

clam say PUP http://virusscan.jotti.org/en/scanresult/24cab5e3186e88d1a39197ddc570f32a6eae7a22
from the name it seems to be the packer

nothing here
https://www.metascan-online.com/en/scanresult/file/2669adfe0d874159b176da6c8d21414d

Hi Polonus,

Is it detected when you scan it with http://camas.comodo.com?

~!Donovan

Hi !Donovan,

Good find, good tip, know I always can rely on your insight. I owe you one,
but it only realized here: http://siteinspector.comodo.com/public/reports/16101041
DrWeb does not detect it. File is mirrored from different IPs → http://www.google.nl/search?q=DoctrisRus_1819.exe&oq=DoctrisRus_1819.exe&sourceid=chrome&ie=UTF-8

polonus