Re: generic detection

Marius Huse Jacobsen <[email protected]>
Newsgroups gmane.comp.security.virus
Message-ID <[email protected]>
Hussain Salim wrote:
> hi,
> i want to know somenthing about generic detecion for example symantec 
> detect some viruses and trojans as trojan.horse or backdoor.trojan why? 
> why don't they detect them as a special name to know more information 
> about them to fix what they do and thx.
> 
> im asking this question because i got many trojan.horse and 
> backdoor.trojan and there is no technical details for them to know more 
> information to fix what they do in my computer :( .
> 

"Heuristic detection" happens by recognizing code - and making an 
educated guess as to its "sewn-together" purpose. This allows 
recognizing viruses/trojans/etc that haven't been sent in for analysis.

Otherwise, only those found by users and sent in would be detected.

(Obviously, this allows a lot more false alarms too)
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.