F-Prot missing UPX'd files?

"Ian.H" <ian DeleteThis @WINDOZEdigiserv.net> wrote:

<<snip long, and well-detailed story...>>
> Been a happy user of F-Prot for _many_ years... but was surprised to find
> it miss this in UPX'd format with the '-packed' option set.

I think that is because you are misinerpreting what "-packed" is supposed
to do (at least for current versions of F-PROT). It scans (certain kinds
of) _archive_ files. Executables packed with runtime decompressors (RTDs)
are not archive files.

However, if FSI has changed the meaning of "-packed" to include on-the-fly
handling of RTDs _and_ UPX is on the list of RTDs supported, you should
send the file to FSI for analysis so they can determine the cause of the
problem and fix it.


--
Nick FitzGerald