It has always seemed like an unending battle to me. The only way this ends is to make an AI antivirus that can decide whether a particular software is malicious or not.
That already exists, and has existed for many years, it's called 'heuristics'. Not quite as buzzwordy without hanging 'AI' on it though.