[go: nahoru, domu]

Antivirus software: Difference between revisions

Content deleted Content added
Restored revision 1215625055 by CNMall41 (talk): Rv redundant
KayeAye (talk | contribs)
Line 153:
 
=== Heuristics ===
Many viruses start as a single infection and through either [[MutationPolymorphic (genetic algorithm)code|mutation]] or refinements by other attackers, can grow into dozens of slightly different strains, called variants. Generic detection refers to the detection and removal of multiple threats using a single virus definition.<ref>{{cite web |url=http://www.securelist.com/en/glossary?glossid=189210517 |title=Generic detection |access-date=July 11, 2013 |publisher=Kaspersky |url-status=dead |archive-url=https://web.archive.org/web/20131203013651/http://www.securelist.com/en/glossary?glossid=189210517 |archive-date=December 3, 2013}}</ref>
 
For example, the [[Vundo]] [[trojan horse (computing)|trojan]] has several family members, depending on the antivirus vendor's classification. [[NortonLifeLock|Symantec]] classifies members of the Vundo family into two distinct categories, ''Trojan.Vundo'' and ''Trojan.Vundo.B''.<ref>{{cite web|url = http://www.symantec.com/security_response/writeup.jsp?docid=2004-112111-3912-99|title = Trojan.Vundo|access-date = April 14, 2009|last = Symantec Corporation|date=February 2009| archive-url= https://web.archive.org/web/20090409002645/http://www.symantec.com/security_response/writeup.jsp?docid=2004-112111-3912-99| archive-date= April 9, 2009 | url-status= live}}</ref><ref>{{cite web|url = http://www.symantec.com/security_response/writeup.jsp?docid=2005-042810-2611-99|title = Trojan.Vundo.B|access-date = April 14, 2009|last = Symantec Corporation|date=February 2007| archive-url= https://web.archive.org/web/20090427160747/http://www.symantec.com/security_response/writeup.jsp?docid=2005-042810-2611-99| archive-date= April 27, 2009 | url-status= live}}</ref>