http://www.kumite.com/myths
Educate new employees about virus hoaxes the easy way
MYTH: "some viruses can hide from all antivirus software, making them truly undetectable"
This myth ironically surfaced when antivirus companies publicized how they could detect the so-called
"Mutation Engine" strain of viruses. The myth gained national prominence in early 1993 when the
Associated Press printed excerpts from a then-new book about viruses.
This myth continues to linger largely because antivirus companies issue press releases claiming other
antivirus companies can't detect the latest galactic threat to computers.
Reality:
Most viruses employ a character-based "signature" which identifies it both to the virus (so it doesn't
infect an executable file repeatedly) and to antivirus software (which uses the signature to detect the virus).
A Mutation Engine virus employs an algorithm signature rather than a character-based signature -- but it still
has a unique, readily identifiable signature.
The technique of using algorithm signatures really doesn't make it any harder to detect a virus. You just need to
do some calculations to know the correct signature -- no big deal for an antivirus program (despite what the
company's advertisements may tell you).
Likewise, certain "macro viruses" can hide themselves from the curious user who inspects his computer
with the naked eye, but it too has a unique, readily identifiable signature. Again, no big deal.
