@osxreverser AV companies always worked like this: detect what is known. What can you do with what is not known? 0day prevention... is hard. SecuObs - L'observatoire de la sécurite internet - Site d'informations professionnelles francophone sur la sécurité informatique