well done Alwil team..

Awil team adds the sig. of the virus “Swen.B” (Ithink Win32:Swen [Upx]
is Swen.B ::slight_smile: , right?)
while others did not till now (real big names ???) …

well done Alwil… ;D
http://www.avast.com/i_idt_1404.html
http://www3.ca.com/virusinfo/virus.aspx?ID=37268

Actually both the .B and .C variants of Swen are covered by the ‘Swen [Upx]’ signature.

The strenght of Avast is certainly the frequency of its updates. It’s faster and leaner than most expensive commercials. (I almost tried them all)…

Good job as always ! ;D

Waldo

Well, we have already seen 4 variants for swen:

  • the original (unpacked) one
  • UPX-packed variant
  • 2 hexedited UPX-packed variants (unimportant changes)

The last 3 ones are covered by the Swen [Upx] signature.

Edit: Argh, Vlk was faster, as usual :slight_smile: