🚀 go-pugleaf

ncoast!arnold@usenet.INS.CWRU.Edu writes:

> again about a week after the anouncement.  I have also been told that
> McAFEE can already detect all the virus created with the MPC.  Note:

At least version 99 of SCAN cannot.

> There is a new Mutation Engine out called TPE, it E It is from Italy
> or Somewhere near in, and supposedly it is better an MTE.  I don't

TPE seems to be from the Netherlands, according to my information...
There is already at least one virus that uses it; we are calling it
Girafe. TPE is smaller than MtE - about 1.6 Kb, compared to the 2.5 Kb
of MtE. At first look it seems indeed more polymorphic, because there
are no fixed things like JNZ backwards as in the decryptors generated
by the MtE. However, if you take a closer look, you'll see that it is
actually less polymorphic and if you ignore the noise instructions in
the decryptor, the total number of possible decryptors seems to be
less than in MtE... Of course, further analysis is needed in order to
confirm that.

Regards,
Vesselin
- -- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.1 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany