Bitsum PeCompact 2.8x up to the latest Version a Virus?
Executable compressors work by compressing selected portions of executables. At runtime, compressed executables are decompressed and reconstructed directly into their virtual image (memory) so that no data is ever written to the disk. The executable can therefore be run exactly as it was before without the user even knowing it was compressed.
PECompact2 is a next generation win32 executable/module compressor. Commonly termed an 'executable packer', such utilities compress executables and modules (i.e. *.EXE, *.DLL, *.OCX, *.SCR). At runtime the compressed modules are rapidly decompressed in memory.
PECompact performs better than other industry competitors in both compression ratio and decompression speed, but most importantly it is commercial ready software that is constantly updated and maintained. The decompression algorithms used by PECompact are optimized for maximum decompression speed. This results in the load time of compressed modules often being improved since fewer bytes must be read from the storage medium. Additionally, the compression ratio of PECompact is better than any general purpose compression software like ZIP, RAR, or 7-ZIP. This is because PECompact is optimized for a specific type of file format: executables. The compression ratio typically ranges from 70% to 80%, but varies depending on the specific module.
Changes since v2.82 final
Change.Core: Added support for ASLR (randomized image basing) executables in PECompact, PEC2GUI, and PETrim. Specifically, fixups/relocations are no longer stripped by default on ASLR enabled EXEs. In previous versions, the user had to set /StripFixups:No for these EXEs to work in Vista and above.
Change.Installer: Updated to NSIS 2.37.
Download (trial): http://www.bitsum.com/showtrialdownloadlink.asp?ProductID=68232&Beta=False
Download (student/freeware): http://www.bitsum.com/files/pec2student.zip
Download (retail): http://www.bitsum.com/userservices
Direct to trial: http://www.bitsum.com/files/pec2setup.zip
Direct to student/freeware: http://www.bitsum.com/files/pec2student.zip
June 9, 2008:
PECompact v2.86
Homepage: http://bitsum.com/
Some single files scan results:
File PEChksum.exe
Result: 5/33 (15.16%): http://www.virustotal.com/analisis/01753cb5b0a9bc2793cbad3f432f5ab2
File pec2codec_jcalg1.dll:
Result: 5/33 (15.16%): http://www.virustotal.com/analisis/c09e58c4578944707fdb7b85b149090f
File pec2gui.exe
Result: 3/33 (9.1%): http://www.virustotal.com/analisis/231e94ce915162af9f650a1f539766ec
File updatechecker_chinesegb.dll:
Result: 4/33 (12.13%): http://www.virustotal.com/analisis/685d37791c415d80ceb1a7ade2941bff
File PEWaterMark.exe
Result: 3/33 (9.1%): http://www.virustotal.com/analisis/82432bcea193685257a959bed7100df0
File PESubsys.exe
Result: 2/32 (6.25%): http://www.virustotal.com/analisis/253077a8c6f43b0927dff0a39644c0d5
File PEInsert.exe
Result: 5/32 (15.63%): http://www.virustotal.com/analisis/7160483c9b7bf9b1f168b4e8e2cbffff
File PEHideText.exe
Result: 6/33 (18.19%): http://www.virustotal.com/analisis/ffe449cfaf911e4bfa5f198addbe4d21
File peclassify.exe
Result: 6/33 (18.19%): http://www.virustotal.com/analisis/552e0f1f959de5c6948f483596d4e155
File PEChksum.exe
Result: 5/33 (15.16%): http://www.virustotal.com/analisis/a2660c5921489c9a3bfb98c19c3a18e5
File pec2ldr_reduced.dll
Result: 1/33 (3.04%): http://www.virustotal.com/analisis/8e4c8a2dd407b724baa0946878867c8c
File pec2ldr_default.dll
Result: 1/33 (3.04%): http://www.virustotal.com/analisis/bcf2de6fc092f3de4a3f192d42c7ac74
File pec2ldr_antidebug.dll
Result: 1/32 (3.13%): http://www.virustotal.com/analisis/f9f14939e7cafe415e7e06965d949cee
File pec2codec_lzma.dll
Result: 4/33 (12.13%): http://www.virustotal.com/analisis/93e37a02b695afebb23f5ce2aa397ade
File PEC2.exe
Result: 4/33 (12.13%): http://www.virustotal.com/analisis/a6f1f7b1a28dda4f9d65da354a2f2c62
File lzma.exe
Result: 5/33 (15.16%): http://www.virustotal.com/analisis/d162aafe733e6d9c4b32946aa63c09d9
0 comments:
Post a Comment
We would appreciate if you as readers of our blog, show us some feedback by signing up to this site with Friend Connect.
This will encourage us to publish updates in the future.