I believe that you detect applications based on their behavior but for some reason you don't monitor scripts or software writing to removable drives the instant they are plugged in, nor do you monitor the ones that instantly hide all files on removable media and creates shortcuts to the original files but also run the virus via the shortcut. is this so hard to fight? come on, what is the excuse?
These are probably detected by signature and new versions arrive evry day
Anyway, a very good tool to detect and clean these is MCShield FREE >> http://www.mcshield.net/
It works in a different way and dont need signature to catch these
