Fprot Eldorado" heuristic engine

Hi,

I noticed recently a lot of detections on VirusTotal where Fprot flags as Eldorado heuristics. I am guessing this has been added recently as Authentiam do not give the same detection?

Anyone have any more info. Are the Maximuss heuristics still being used?

Cheers

Jlo

 

AFAIK Maximus is still active; and Eldorado heuristic engine is the new one added with the release of version 6.0.8.0 recently.

 

Thanks Firecat,

 

The above courtesy of Mario, Frisk AV engine researcher/developer.

 

Superb stuff. Really interesting to read about it.

Thanks for this post.

Jlo

 

A new thread posted on the F-Prot Forum about the new Eldorado heuristics.

Apparently the new version now has 3 heuristic engines; "Maximus", "GSA" and now Eldorado.

 

that is nice. I wished I could have seen them in action on av-comparatives.org retrospective test. But I'll wait for the next one.

 

I suspect loads more fps, but hopefully they can sort those within 6 months for the next retro test

 

Not that many here and the detection rates on the highest setting are very impressive.

But any new heuristic engine will need tweaking.