[kccqzy]

I can second that. A lot of virus detection basically boils down to detecting this particular substring. Which is usually quite easily bypassed.