Many scanners use different techniques to discover new variants, or even totally new viruses.
Searching for the unknown has always been prone to false alarms. I will describe how it is done, the hit rates and experience in the real world. Further, I will present ideas on how it will be expanded in functionality and how to detect more classes of binary viruses. A demonstration of the system will be given. This method does not care whether a virus is encrypted, polymorphic, metamorphic etc.