---- Original Message ----
> From Tomasz Kojm <[EMAIL PROTECTED]>
> Date: Thursday, 05 Jun 2003, 16:22
>
> Please update your database immediately !

Out of interest how does clamav cope with the polymorphic nature of this 
virus.  At least according to the descriptions I've read it's 
polymorphic (I haven't seen any copies yet) - is there a large enough 
non-polymorphic section to match on or what?

My understanding is the most commercial virus scanners now include 'code 
emulators' that emulate running parts of the executable in a sort-of 
virtual machine in order to reliably pick up polymorphic viruses.  I 
guess at some stage it'd be nice to write such a beast for clamav, but 
I'd imagine that it would require a fair amount of time.

-- 
Stephen White <[EMAIL PROTECTED]>

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Reply via email to