Author Topic: avast! started using generic signatures :)  (Read 2764 times)

0 Members and 1 Guest are viewing this topic.

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
avast! started using generic signatures :)
« on: December 04, 2004, 05:07:00 PM »
I just noticed on Jotti that avast! is detecting  Win32:Wootbot nasties with generic signatures (Win32:Wootbot-Gen) like rare 3 do (Kaspersky,DrWeba and BitDefender).
I saw another gen detection of whole family not long ago.
So i guess Alwil will start removing seperate signatures and replace them with generic one or not? How that works?
Visit my webpage Angry Sheep Blog

Offline Dwarden

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1793
  • Ideas, that's ocean without borders!
    • Bohemia Interactive
Re:avast! started using generic signatures :)
« Reply #1 on: December 06, 2004, 04:27:37 AM »
looks like so hyped heuristic ? :)
- code similarity ... less effective as so called full heuristic :) but still more than just exact code comparsion :)

no idea really :) it can be anything ...
https://twitter.com/FoltynD , Tech. Community, Online Services & Distribution manager of Bohemia Interactive

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re:avast! started using generic signatures :)
« Reply #2 on: December 06, 2004, 05:17:58 PM »
Could be. Second one was Win32:SpyBot-Gen. Saw it today again on Jotti.
Any comments from Alwil team?
Visit my webpage Angry Sheep Blog