Bluesman: exactly.. not an excuse, just some facts about the testing... we're aware of the room for improvements and some steps have already been done (SuspBehav detections - ~3 weeks ago - they were not included in the tested version, dynamic translation used to detect new Sality - ~ a week ago, new winexec unpacker - ~2 weeks ago), more steps will follow.. btw: as kubecj already wrote - when someone detects 40% of new daily feed from virustotal e.g. then he's a "master of the clan", that's a reality.. Clementi's set must be somehow filtered, otherwise it would be impossible to achieve a detection of 60%, 80% etc..