It is funny to pick on malware writers…I like it… This time I would like to recommend that they use anti-virus as well, otherwise they can also be infected !

There is no honor among malware writers and we know that. Today I was looking at a file downloaded by what was looking like a common PWS-Banker.dldr (a downloader for Password Stealer Bankers). While doing some analysis on the file, another virus detection came out: W32/Gael.worm.a. This one is a parasitc virus. This made it a bit more suspicious because it is not common to see a PWS-Banker downloader downloading a parasitics virus (really different skills). So, I attempted to clean it to try to make things a bit more clear. I cleaned the file and BINGO! another file came out, detected as PWS-Banker.gen.q ! Which means that the malware created/bought by the malware writer was infected or he/she got infected before posting the file on the site to be downloaded… . Yeah, my job is tooo funny!