Failure. You need to bind the malicious code to a functional working program. Then stupid security scanners miss it. xD That idiot clearly had *no* idea what he was doing.