Re: SCAN 95b doesn't find MtE in EXE files (PC)

Thread View: comp.virus

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by Vesselin Bontchev Mon, 16 Nov 1992 15:43

#4229

Author: Vesselin Bontchev
Date: Mon, 16 Nov 1992 15:43

23 lines
1617 bytes

tck@bend.ucsd.edu (Kevin Marcus) writes:

> Frisk, that is a very serious problem.  It's quite analogous to the
> reason why 100% detection of MtE based .COM infectors is necessary.

Not quite. It is analogous to the problem for detecting viruses in
self-compressed files. My own opinion is that instead of forcing
everybody's scanner to be able to handle all the dozen
self-compressors available, it would be much better to have the
scanner only warn you about the compression and have a separate
program that can strip the compression off.

However, I agree that if somebody's scanner claims to be able to scan
inside compressed executables, it should be able to do so any find all
viruses that it normally can find in uncompressed files.

Regards,
Vesselin
- -- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.0 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads