Summary: Virus-Antivirus Co-evolution
Symantec Research Labs
Copyright Symantec 2001
Today's Topics
We will explore the co-evolution of both viruses and
signature-based anti-virus detection over the last
decade.
Copyright Symantec 2001
1. User runs an infected program.
0100 EB1C JMP 011E
0102 BE1B02 MOV SI,021B
0105 BF1B01 MOV DI,011B
0108 8BCE MOV CX,SI
010A F7D9 NEG CX
010C FC CLD
010D B81B01 MOV AX,011B
0110 06 PUSH ES
0111 50 PUSH AX
0112 06 PUSH ES
0113 B81801 MOV AX,0118

Source: Abadi, Martín - Department of Computer Science, University of California at Santa Cruz

Collections: Computer Technologies and Information Sciences