I thought most of the virus scanners nowadays use sandbox techniques to check for "bad" behavior. Therefore the polymorphic virusses will also be detected.
of course these detection techniques are also known to virus creators, and can easily be bypassed using a bunch of random, unharmfull, code executions before the actual payload.

不可能检测到所有已知的poly/metamoric坏代码。白名单验证是唯一可证明的技术。这并不总是可行的，尤其是如果你的基础设施/计算机没有得到很好的维护。这就是为什么签名、启发式、基于仿真的检测仍然有价值的一个很好的原因。