Command-line virus scanner, Clam AV 0.95.2, run the update virus signature definitions, scan files and identify the Trojan Traditionally, antivirus software is very reliable signatures to identify malware. This can be very effective, but can not defend against malware samples except signatures have been obtained and made. Therefore, signature-based approach is not effective against new, unknown virus.
Because new viruses are created every day, signature-based detection approaches often require updates virus signature dictionary. To help enterprise antivirus software, the software can allow a user to upload a new virus variants or the company, allowing the virus to be analyzed and a signature being added to the dictionary. Although signature-based approach can effectively contain virus outbreaks, virus authors have tried to stay one step ahead of such software by writing "oligomorphic", "polymorphic" and, recently, "metamorphic" viruses, which encrypt parts of themselves or otherwise modify themselves as a method of disguise, so it does not match virus signatures in the dictionary.
No comments:
Post a Comment