Alessandro Zanello

More and more useful, free services online scanning suspicious files in real time as Jotti , NoVirusThanks , VirusTotal and ThreatExpert have become a reference: on these sites can provide a file that do not trust it because it is analyzed by a score or Most anti-virus, in order to have an overall picture and decide based on the percentage of recognition of the various anti-virus used as a threat.

The antivirusattuali base their ability to capture virus signature recognition (recognition of a typical code fragment for a specific virus) but also, given the frequency of polymorphic viruses (which change randomly part of their code) on heuristic techniques, namely Recognition of malicious behavior.

In other words, a program that recognizes decodificandole passwords for access to the sites of your FTP transfer program would probably be labeled as infected by at least half of the antivirus available. And if the exe was encrypted for defense and / or compressed to identify as a threat is obvious, usually with the typical words "probably a variant of Win32.Hack" or something similar.

The virus of today are not like they used to be, that when they said that it was a virus so it was.

more »