MALWARESCOPE

MalwareScope™. The usage of this technology allows building automatically a single entry in the Vba32 antivirus database for a definite family of malicious programs to detect the whole existing family. Moreover the program robot forecasts the possible ways of malware evolution and allows creating "look-ahead" notes to detect the modifications that haven’t been created yet. Thus it solves one of the major issues of traditional signature search when a virus analyst has to get code of a malicious program before it is added to antivirus database. Now the program can recognize modifications by itself and detect a virus even if it has been modified by the author or a virus family has been created on its basis.