Hi Chaps,
Just some general information really. We are starting to have a big crack down (excuse the unintententional pun!) for certain files on peoples machines. One of the files we are targeting is called Keygen.exe and as you all know is usually used to create serial nos. used to illegally activate software. It is not a big problem but there are users who try to push the envelope... Anyway I have noticed that SEP does not always detect these keygens, but some it does and I think those have other more maliceous stuff hidden in them. How would any of you tackle this problem. You have to remember that there are applications out there also in use here that are actually quite innocently using the exe's in them named kegen. Or if you did a wild card it *keygen*.exe there are other apps that have the 'keygen' string in their name.
Cheers
PaulC