🚀 go-pugleaf

tck@bend.ucsd.edu (Kevin Marcus) writes:

> Frisk, that is a very serious problem.  It's quite analogous to the
> reason why 100% detection of MtE based .COM infectors is necessary.

Not quite. It is analogous to the problem for detecting viruses in
self-compressed files. My own opinion is that instead of forcing
everybody's scanner to be able to handle all the dozen
self-compressors available, it would be much better to have the
scanner only warn you about the compression and have a separate
program that can strip the compression off.

However, I agree that if somebody's scanner claims to be able to scan
inside compressed executables, it should be able to do so any find all
viruses that it normally can find in uncompressed files.

Regards,
Vesselin
- -- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.0 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany