When antivirus products (and Internet Explorer) fail you
When antivirus products (and Internet Explorer) fail you
When Didier Stevens recently took a closer look at some Internet Explorer malware that he had found, something surprised him somewhat.
He discovered that the IE-targeted malware had been obfuscated with null-bytes (0x00) and when run against VirusTotal, he found that fewer than half of the products identified the sample as malware (15 of 32). When all null-bytes were removed, the chances of successful detection improved, though not as much as would normally be expected (25 of 32 detections).
When Didier tried adding more null-bytes to the sample he found that the number of successful detections decreased steadily until, with 254 0x00 bytes between each character, McAfee was the last one standing. When antivirus products (and Internet Explorer) fail you | Channel Register
20% off Spyware Doctor and Registry Mechanic - use coupon code: pctools20. Click Here Now!
$10 off on Spy Sweeper. And shop safe this holiday season. Click Here Now!
15% on Norton AntiVirus 2008 - coupon code: 10NAV08. Click Here Now!
Back to: PC Security, privacy news
More News, Articles from elsewhere
All trademarks, product names and company names or logos cited herein are the property of their respective owners. News content is the property of their respective authors/owners/publishers.
Malware Help. Org does not represent, warrant, or endorse the accuracy, reliability, completeness or timeliness of any of the information, content, views, opinions, recommendations or advertisements contained on, distributed through, or linked, downloaded or accessed from any of the information contained in this News Story.
By reading this you understand and agree that everything that is written in this article is for educational use only, and none of it should be used at any circumstances, and if you choose to use this information for any kind of action you take full responsibility for it and release Malware Help. Org (c) of any responsibility. If you do not agree to whats written here, LEAVE NOW!
Webmasters! Don't want your site's news/articles appear here, No problem, please drop me a line, Malware Help. Org will be happy to comply with your wishes.
