home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
The World of Computer Software
/
World_Of_Computer_Software-02-385-Vol-1of3.iso
/
m
/
mteavr22.zip
/
MTE.DOC
< prev
next >
Wrap
Text File
|
1992-07-15
|
1KB
|
50 lines
Documentation for MuTation Engine Algorithmic Virus Recognition module v2.2
---------------------------------------------------------------------------
--- MTE.AVR 2.2
Changed the MTE.AVR to process EXE files too.
Fine tuned the MTE.AVR a little to catch those few remaining samples too!
--- MTE.AVR 2.1
Due to my random generator, a few variants of the Mutation Engine did not
appear in my test set that consisted of 200.000 MTE encrypted files.
This MTE.AVR has been modified to detect these few MTE-variants also.
Thanks to Righard Zwienenberg for his "false negative" samples.
--- MTE.AVR 2.0
Note that the MTE.AVR series v1.x were written by another author.
This MTE.AVR module has been written by Frans Veldman.
To avoid confusion about the author, this MTE.AVR module has an initial
version number starting with v2.0.
This should be the final MTE.AVR. The 1.x versions could be considered as
emergency releases. They only found 85% of the Mutations, and they caused
a lot of false alarms.
This MTE.AVR has been tested over 200.000 of mutants, and it detected
them all. No false alarms occured. If you have a program that causes
false alarm, please sent it to us.
--- MTE.AVR 1.x
The 1.x MTE.AVR versions are written by Edwin Cleton (SaeSoft).
---
MTE 2.1
=======
Copyright (C) 1992 ESaSS B.V. Nijmegen, The Netherlands.
Tel. +31-80-787881
BBS. +31-85-212395 (2:280/200 @fidonet)
Frans Veldman