1 year, 3 months ago
via nortonantivirusquestions.com
What are the methods to study the behavior of a virus and evaluate detection methods of an anti-virus?
What is a polymorphic virus and why does it pose a challenge for an anti-virus software? If a virus infects all bait files can they be used to detect if the anti-virus can detect all versions of the virus?
Separate topics with commas, or by pressing return. Use the delete or backspace key to edit or remove existing topics.
You can leave an optional "tip" with Mahalo's virtual currency, Mahalo Dollars. If you are asking a difficult question that might require some research, or if you'd like a wide variety of feedback, a higher tip often leads to more answers to your question.
M$1 Answer
The polymorphic virus, at the time of infection, creates slightly modified, functional copies of itself. This is primarily done to fool the detection of a virus scanner. Because some are not able to identify different instances of an infection. One way it generally uses to bypass a scanner is self-encryption with a variable key.
Bait files are files that are specially created by anti-virus program to be infected by a virus, so that viruses can be detected easily. As bait files are created to be infected and increase the chance of virus detection, viruses are programmed to avoid them, to avoid detection.
Many anti-virus vendors use bait files to take sample of a virus, because it is a copy of a program file that is infected and more practical to store than a large application infected by a virus.
Bait files are files that are specially created by anti-virus program to be infected by a virus, so that viruses can be detected easily. As bait files are created to be infected and increase the chance of virus detection, viruses are programmed to avoid them, to avoid detection.
Many anti-virus vendors use bait files to take sample of a virus, because it is a copy of a program file that is infected and more practical to store than a large application infected by a virus.
You can leave an optional "tip" with Mahalo's virtual currency, Mahalo Dollars. If you are asking a difficult question that might require some research, or if you'd like a wide variety of feedback, a higher tip often leads to more answers to your question.
M$Report Abuse
