[nopsy]

Hi there,

I've noticed the AV companies are talking about their new mechanism of reputation protection.
As I understand it, it's supposed to send unknown files to the server for analysis, and return the answer to the client.

The thing is, there are couple of questions that remains unsolved, such as what files will be checked (only exe?), and what other details will the AV collect? Will I know when something is sent, or will it happen transparently?
and the main thing is, how will they decide that something is good or bad according to its source...? seems like it may lead to a lot of false positives...
They also need to have very serious servers to handle such amount of traffic I guess...

I'll be glad if someone can shed some light on this subject...

Thanks.