Detecting properly-written malicious code is undecidable. No amount of snake oil fixes that