[Libreoffice] True Trojans or false positives ?

[Michael Meeks]

Hi Dmitry,

On Fri, 2011-09-30 at 17:11 +0400, Dmitry. A. Ashkadov wrote:
> If the files will be XORed then during testing they will be unXORed. I
> think, antiviruses can handle unXORed files and block testing.

	Haha ;-) well we'll see how good these antivirus guys are then. My hope
would be that if we stream them through memory in small chunks, there
won't be a problem - AV systems can't fingerprint all memory at all
times - you would hope they mostly fingerprint I/O as it happens.

	HTH,

		Michael.

-- 
michael.meeks at suse.com  <><, Pseudo Engineer, itinerant idiot