Quote:AV companies consider alot of RAT's as trojans.Which they are really trojan builders
I don't see the difference when the goal in the end is the same. Thus this has no bearing on what they mark it as, whether it's a trojan itself or a RAT. And a RAT is not a trojan builder... :S Where did you ever get the notion that a remote administration tool is a trojan builder? TeamViewer is an example of a RAT which is commonly used for non-malicious intent.
A RAT is a RAT... If it's meant for malware then it probably has malicious code embedded within (for instance, to hide itself from TaskManager). Tool or not is irrelevant. I think you're confused by this idea of tagging you have. They tag files based on the scan results, which is based on what malicious signatures are detected within the binary itself. Scanners have no concept of what the program is going to be used for, it checks for signatures in the code which are generally in other malicious files that have been reported.
Of course if nothing is shown as detected it doesn't guarantee that the file is clean. Everybody should know that. But what it
does mean is that it didn't match any of the already known malicious signatures out there. So why would you completely avoid checking the known malicious content, just because of the chance that someone has created something malicious that is not yet detected by an AV? That doesn't make sense.
The fact that there are "tools" to make *everything* undetectable to AV scanners doesn't mean that they are the golden solution, and it also doesn't mean it will stay undetectable forever. There's a reason why AV programs get updates.
Quote:The only real way to be sure of no backdoor is to analyze the program with a hex editor or upload it to a place like anubis where they will analyze it and show results
A hex editor? lol... Places like VirusTotal analyze the file too you know? :S
Quote:Being tagged by AV's doesnt mean that the program is harmful to your computer.
No, I mentioned this above, but usually there's a signature that it's *tagged* with, and if you are curious you can do your own investigation after that point in time like most would do. If anything a scan gives you a hint for what to look for should you decide to check the file on your own instead of doing it blindly. You can determine whether it's a false positive or not, and maybe you find something else hidden in that binary along the way.