Now i'm trying to type Thai by using virtual keyboard but I've a short Tolerance. So now I'm using English langauge for this nonsense entry.
Note : Maybe I'll use "Terrible English" and/or "Tinglish" please don't mind about this.
First a Confiker (or Kido) worm sperading around the world. Many AV vendors are working hard to stop this worm form sperading.
After some entry that's I said Korean security program is useless but they think they are best in local and must be best in Global too.
I've search about this worm I've find a lot of variants of detection name.
But I'm very surprise for user of nProtect Anti-Virus product.
Other AV vebdor use a character in detection name for it's variants but Korean security apps does not .
They use a numberic to define a size of malware.
Did you know ? Confiker worm can be morph and mutation by itself.
A good AV product should use .GEN for detection rutine.
This is a good idea for reduce database size from downloading.
But nProtect didn't think outside a box.
Please take a look here about Confiker worm in Korea
Look for a very long page about detection name (They used a name "Kido")
Let's see there're a same malware but the size was different.
Detection name must being with the size of that malware file for nProtect.
Now I'm know why Korean security program is best in Korea ONLY.
Because if you use outside Korea you'll used to download a (very) big size of database. (But they called "Engine")
Just imagine you're not using High speed internet and you live far away from Korea and updating your "No1 in security and Know How" product.
Guess the time that's used for download an virus database, No no! a daily "Engine".
Before left I would like to say It's very cold in Wales.