Re: [clamav-users] Problems with obfuscated code (php)

2014-01-31 Thread Steven Morgan
Sorry, I mistyped my previous reply, meant to say: You may find the ClamAV "bytecode compiler" useful in doing this. http://www.clamav.net/lang/en/download/sources/ On Fri, Jan 31, 2014 at 2:53 PM, Steven Morgan wrote: > Torge, > > You may find the ClamAV useful in doing this. > > http://www.

Re: [clamav-users] Problems with obfuscated code (php)

2014-01-31 Thread Steven Morgan
Torge, You may find the ClamAV useful in doing this. http://www.clamav.net/lang/en/download/sources/ On Fri, Jan 31, 2014 at 12:08 PM, Torge Husfeldt wrote: > Hi List, > > I have a problem with obfuscated php-code of well-known shells. > I have prepared an example where clamav correctly detect

[clamav-users] Problems with obfuscated code (php)

2014-01-31 Thread Torge Husfeldt
Hi List, I have a problem with obfuscated php-code of well-known shells. I have prepared an example where clamav correctly detects the shell itself, but happily flags as OK all the obfuscated variations. You will find the files I'm talking about in the following zipfile (protected with password