avast! started using generic signatures :)

Viruses and worms
1

I just noticed on Jotti that avast! is detecting Win32:Wootbot nasties with generic signatures (Win32:Wootbot-Gen) like rare 3 do (Kaspersky,DrWeba and BitDefender).
I saw another gen detection of whole family not long ago.
So i guess Alwil will start removing seperate signatures and replace them with generic one or not? How that works?

2

looks like so hyped heuristic ? :slight_smile:

  • code similarity … less effective as so called full heuristic :slight_smile: but still more than just exact code comparsion :slight_smile:

no idea really :slight_smile: it can be anything …

3

Could be. Second one was Win32:SpyBot-Gen. Saw it today again on Jotti.
Any comments from Alwil team?