View Single Post
  #98  
Old February 27th, 2008, 10:21 AM
Frisk Frisk is offline
AV Old-Timer
 
Join Date: Jan 2008
Location: Iceland
Posts: 31
Default Re: F-Protect impression

Quote:
Originally Posted by Lordman
Good new!

6.0.9.0 will not have any significant functionality changes in the GUI - it is mostly a "bug fix and performance improvement" release.

In addition, it uses a new engine version: 4.4.4. The changes since 4.4.3 are as follows:

- Significant improvements to the "Eldorado" heuristic engine, including
changes to support heuristic detection of 64-bit malware.

- Better handling of malware using encryption methods like DES.

- Added scanning of self-extracting CAB files (WEXTRACT files).

- Better detection of obsolete DOS .COM files that have been renamed not
to have an executable extension. This change serves no useful purpose
other than to prevent F-PROT from getting an undeserved low score in
certain tests that still award points for detection of renamed DOS
files that cannot be considered a realistic threat today.

- Fixed a vulnerability reported by Sergio Alvarez (sergio.alvarez@nruns.com)
where a corrupted (or specifically crafted) .CHM could cause an
out-of-bounds memory access.

- Fixed a bug where a corrupted UPX-compressed file could crash the engine.