Re: Question about Viruses

["<...>" <massimo () grandmedia si>]

did you REALLY read what you wrote before hitting return?

if you get identified as "another" virus means you ARE identified :-(
if you are identified you GO TO JAIL without collecting the money ;-)

default action: remove/disinfect
backup action: quarantine


you're dead or in jail.....



----- Original Message ----- 
From: "Dude VanWinkle" <dudevanwinkle () gmail com>
To: "FunSec LList" <funsec () linuxbox org>
Sent: Friday, July 07, 2006 5:11 PM
Subject: [funsec] Question about Viruses


> Has anyone heard of a virus masquerading as another virus in order to
> avoid detection.
>
> Well you wouldnt be avoiding detection per se, just avoiding correct
> identification.
>
> How hard would it be to throw a signature for, let say
> troj_stargpag.qy in your app that was really a (insert favorite/least
> favorite virus here)
>
> -JP
> _______________________________________________
> Fun and Misc security discussion for OT posts.
> https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
> Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.