Posted on 2004-02-05 14:04:12, modified on 2006-01-09 16:29:20
If a virus scanner has all virus definitions in its data files, wouldn't the virus scanner pick them up then?| Share on Facebook | Share on Twitter
|Posted on:||2004-03-04 16:22:51|
|Comment||Put it this way:
Are you your name?
No. You are much more than that. You are a person (I think). Same with a virus. The scanner will see a list of definitions but the list itself won't have the same definition as any of it's contents.
Try the following as an experiment:
Include an MD5 (or any checksum) of a file in that file. The moment you add the checksum, it changes, so you change the checksum to reflect the new value and the checksum will change again. The same with the virus definitions. The "definition" (if one could call it that) of the definition list will not match any of the definitions it holds.