![]() |
|
#26
|
|||
|
|||
|
We do statistical analysis to identify modified packer stubs. That means that even if someone has a "private build" of a malware packer we can identify it. Most programs only do exact matches on packers.
__________________
Mischel Internet Security Home of TrojanHunter and SSH Edit Twitter: @mmischel |
|
#27
|
||||
|
||||
|
If a scanner detects unknown trojans is not so unknown now is it. Sure there is a lot of nasties for windows but being specifically targeted is so unlikely.The question is when is the last time you where infected.If its been long then just keep doing what your doing and enjoy your self.
__________________
OS X 10.8.4 - 2.9 GHz Intel core i7 - 8 GB 1600 MHz DDR3 - 750 SATA HD - Intel HD 4000 Graphics 512 MB. http://www.flickr.com/photos/darkshadow1911/ |
|
#28
|
|||
|
|||
|
Quote:
By known or unknown, we refer to the actual recognition way of the malware. Most of new threats are unknown till they spread around a bit and get a specific signature for detection. Until then behavioral analysis, heuristics, etc. come into play and tell if the file is malicious or not. You can think of known threats as thieves whom you know to commit crimes and when you see them you can act. However new thieves emerge everyday and you can say that they're suspicious or are attempting to steal something. Sorry for the bad analogy btw. ![]() |
|
#29
|
||||
|
||||
|
Makes sense.That was a good analogy btw.
__________________
OS X 10.8.4 - 2.9 GHz Intel core i7 - 8 GB 1600 MHz DDR3 - 750 SATA HD - Intel HD 4000 Graphics 512 MB. http://www.flickr.com/photos/darkshadow1911/ |
| « Previous Thread | Next Thread » |
| Thread Tools | Search this Thread |
|
|