Unf has not changed with anything for the obfuscation or packing in it an the only reason kasper would be detecting it is changes in there database that are doing so. You can use a processor explorer in a sandbox & see nothing from unf goes outbound for connections.Quote:
That is the scan of [Only registered and activated users can see links. Click Here To Register...]
Antivirus Resultado Actualización
AegisLab DangerousObject.Multi.Gen.lLMN 20161018
Antiy-AVL Trojan/MSIL.Packed.Confuser.P 20161019
Baidu Win32.Trojan.WisdomEyes.16070401.9500.9715 20161018
Ikarus Trojan-Dropper 20161018
Invincea generic.a 20161018
Rising Trojan.Confuser!1.A352 (classic) 20161018
Kaspersky blocks it as soon as it gets downloaded
Even Windows defender deletes it.
The last update that I download that is clean; I download it on 08/Oct/2016.
[Only registered and activated users can see links. Click Here To Register...]
Also > Packed.Confuser , kind of gives it away that its saying the file is packed/protected an not malicious. I'll submit the file for those anti's so it can be possibly avoided in the future ( like I did for google an the such ).