btw: the test of unpacking abilities needs a lot of manual work... where to get samples? of course, you can pack your own samples detected by all tested AV's and re-run the scan.. but you'll need hundreds of samples and only a few packers/cryptors have some cmdline interface and could be processed in batch... you must check all packed files for their unchanged functionality (run them in vmware and check each one)... ooh, and of course some malware packers are strictly private and you can't prepare samples of them.. the other way is to get samples from some public service (virtotal, jotti), but here comes another big problem - how to detect the packers and an exact version if possible? problem with testing occurs also here (virtotal is full of someway corrupted files)..
