Deprecated: Array and string offset access syntax with curly braces is deprecated in /homepages/21/d38531796/htdocs/jose/smfforum/Sources/Subs.php on line 3825
UPX not good!

Author Topic: UPX not good!  (Read 232 times)

0 Members and 1 Guest are viewing this topic.

Offline Zlatko Vid

  • Full Member
  • ***
  • Posts: 185
  • User-Rate: +0/-0
UPX not good!
« on: January 22, 2022, 08:55:20 AM »
Charles you should read this:

Quote
Just as a note on the last posting by JJ, UPX while being a high quality executable compressor for both 32 and 64 bit executable files, it is crippled by the assumptions of the original authors, their theory is that all executables should be available to decompressing them and be able to recompress the exe. This makes it the preferred tool for a vast number of virus/trojan writers as they can open a file, install a virus into it then recompress it. Various AV companies know how it is used and flag anything compressed by UPX as dangerous. I read a very good article from one of the team members of the Microsoft AV scanner on detecting modified versions of UPX that try and avoid its detection but they also know how to detect the UPX stub.