Statefull Packer Inspection against any kind of Malware!

[fs]

On Thu, Aug 12, 2004 at 08:22:22PM +0000, beatnik wrote:
> > E.. oxi. Den syskoleyetai na sbisei h' na diorthosei h' na skotwsei
> > kati poy den etrekse akoma. Ta teleytaia antivirus poy yparxoyn,
> > kanoyn ton elegxo prin to execute.
> 
> To Kasperskey pantos kathos kai alla pou theorountai kala AV DEN to 
> kanoun auto! Den to afinoun men na trexei alla to apothikeuoun ston 
> skliro.

dld, prepei oti "8eoritai" kalo apo to meso windows user na ypostirizei
ayti ti leitoyrgia alliws aporiptis oli thn idea genikotera.

..nice.

> Skopos einai na min apothikeutei ston hdd

Koitakse. Aytes oi tainies poy lene oti ta virus einai kati to magiko
poy molis aggiksei ena computer bgazei amesws pardali xrwmatakia sthn
o8onh toy kai amesws sbinontai ta panta, einai ligo sth sfaira ths
fantasias. To typiko virus den einai tipota allo apo ena executable
binary file. An de to kaneis "execute" menei ena sinolo apo odigies pou
pote den do8hkan ston ypologisth.

> kai mono me tin lysi tou real 
> time traffic check tha mporouse na ginei auto 
> (dedomenou oti tha ekane 
> kai virus update toso syxna oso ena av) eno to av den leitourgei etsi. 
> perimenei na apothikeutei to executable prota kai meta AN mporei to 
> svinei.

Koita, den einai aparaithto na do8ei sta apouhkeytika mesa prwta,
analoga me tis dynatothtes toy antivirus, mpori na mh to afhsei
kan na do8ei alla pera ap'ayto.. skepsoy ligo thn pi8anothta na
mhn einai enas ios kati to magiko poy an den ginei execute
apo ton ypologisth mporei kapoia stigmh san orologiakh bomba na
ekragei. Kai mh skefteis ekeinoys toys ioys poy eixan hmerominia gia
execute, eixan kanei hdh execute to meros poy leei na mpoyn ston
scheduler toy OS.

-fs