ok... so if there's a head or decryptor present then why not just scan for it's string instead of looking for encrypted part of the virus
i\'m the guy who bitched out a girl about writting poems in General Chat... Now everyone thinks I hate women and that I\'m gay ... live and learn ... hehe