General Category > General Discussion

Scenery disappeared

<< < (3/3)

virtuali:

--- Quote from: ckaack on September 03, 2009, 02:01:40 pm ---Now it is working. Nevertheless I am wondering why McAfee is detecting a specific Virus. Normally a Virusscanner is detecting based on file behaviour, name and checksum. Do you know the reason?
--- End quote ---

If Heuristic detection is active, the scanner doesn't simply rely on checksums/name, but (trying to catch viruses that haven't been reported and classified yet), it also checks other things, like the type of compression used, if the program use cryptography, if the program defends itself against tampering, etc. All techniques that are absolutely normal in any program that has something to do with security, but that viruses also use in order to conceal themselves.  So, it might just happened that this pattern was common with that specific virus, so it was recognized as such. This is the most common reason for false positives, that's why it's very important a virus scanner should let the user to exclude specific files from scanning.

ckaack:
Did you file a complain to McAfee already?

Navigation

[0] Message Index

[*] Previous page