Re: generic detection
Marius Huse Jacobsen <[email protected]>
| Newsgroups | gmane.comp.security.virus |
|---|---|
| Message-ID | <[email protected]> |
Hussain Salim wrote: > hi, > i want to know somenthing about generic detecion for example symantec > detect some viruses and trojans as trojan.horse or backdoor.trojan why? > why don't they detect them as a special name to know more information > about them to fix what they do and thx. > > im asking this question because i got many trojan.horse and > backdoor.trojan and there is no technical details for them to know more > information to fix what they do in my computer :( . > "Heuristic detection" happens by recognizing code - and making an educated guess as to its "sewn-together" purpose. This allows recognizing viruses/trojans/etc that haven't been sent in for analysis. Otherwise, only those found by users and sent in would be detected. (Obviously, this allows a lot more false alarms too)