Virus Guy wrote in
news:m2mo8i$vhi$1@speranza.aioe.org:
> Very bad detection rate - 10/54. Here's who detected it:
You still don't grasp how the detection works, obviously.
I hate to tell you this, but it's really not hard to write malware
that won't be detected when you submit it to virus total. What's
worse, you can even take source code to already existing malware and
with very little modification, likely compile a fresh sample that
will not be detected by anything on virustotal.
Here's the real ass kicker for you to dwell on:
The scenario above is normal; this is exactly HOW it works. AV/AM are
primarily retroactive in nature. They often don't detect what they
don't have a signature for.
In many cases these days, the malware samples are server side
polymorphic (google the term, my patience is low tonight). As they
are polymorphs, You most likely will not be able to develop a single
signature that will get all varients of it. And this too, is by
design.
Your complaints are baseless and unfounded because you really *don't*
understand how this game is played. How detection/prevention actually
works and how trivial it really is to evade most of it.
> And we have more! This one's hot-off-the-press (as of 3 hours
> ago):
And it means absolutely nothing. That's the thing you don't seem to
comprehend.
--
If you can read this, Thank a teacher.
If you're reading it in english, Thank a soldier!
--- NewsGate v1.0 gamma 2
* Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4)
|