Well, I was the one that posted the link to the URL scan, and Pondus stated that the URL is not a real “scan” but only a comparison against user reports (or something like that).

The part that I am interested in is the 4 index.html files giving a middle percentage value. In fact, I am interested in the middle percentage value, much more than my interest in the 4 files.

I don’t think this is related to VT. This is more related to the engines, how (in terms of time distribution) the trojans are detected across different engines, and somehow related to maths and statistics.

I could understand other percentage tendencies (as I presented in a previous post), but I don’t understand the “middle” values staying there for a long time.

I was (am) hopping that forum members with more experience than I might have seen this type of situations in the past, so the current “middle” situation could be explained somehow.