1, the encrypted pestware file 120 is obfuscated (i.e., known techniques for comparing the pestware file 102 with pestware definitions are ineffective and/or inefficient).
Known encryption techniques (e.g., variations of UPX) incorporate proprietary and/or randomization schemes that render known techniques that match known pestware definitions with suspect files ineffective.