TIP: Click on subject to list as thread! ANSI
echo: alt-comp-anti-virus
to: ALL
from: ANT
date: 2015-11-26 18:37:00
subject: Re: Does any common malwa

"FromTheRafters" wrote:

> Ant presented the following explanation :
>> WRT R Lopez's OP; it is very easy to create an executable that has a
>> unique signature on every download. There is no need for any special
>> encryption techniqes. One way would be to build an executable with a
>> section that is never used and fill it with random data. A script on
>> the server then generates a random section and puts the thing together
>> when the file is requested.
>
> Yes, I believe that I mentioned server side polymorphism.

So you did.

> Ray asked
> about malware which encrypts its own signature as opposed to malware
> which has its encryption or other polymorphism applied from without.

I'm not sure what he means by "the badware uses encryption to change
its signature". That would imply a virus. However, "badware" could
mean the controlling software that generates the usual type of malware
(real viruses are rare these days) - in which case my example applies.


--- NewsGate v1.0 gamma 2
* Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4)

SOURCE: echomail via QWK@docsplace.org

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.