Re: Virus Detection
I'm pretty sure the signature is not a sample of the actual machine code of the virus, but a hash of all parts. Your program is not strictly a virus, because it relies on the computer owner being stupid enough to run it; ergo, it's a trojan. A malware scanner will check if the file is executable, then take a hash, and compare it to the hash it has in its list of malware.
|