Why would he bring classified malware anywhere near an anti-virus? Isn't it the job of AV software to detect and report new cases of malware?