Re: Question about Viruses

["<...>" <massimo () grandmedia si>]

just write a new virus and go undetected....
easier......

----- Original Message ----- 
From: "Dude VanWinkle" <dudevanwinkle () gmail com>
To: <massimo () grandmedia si>
Cc: "FunSec LList" <funsec () linuxbox org>
Sent: Friday, July 07, 2006 7:57 PM
Subject: Re: [funsec] Question about Viruses


> On 7/7/06, <...> <massimo () grandmedia si> wrote:
> > did you REALLY read what you wrote before hitting return?
> >
> > if you get identified as "another" virus means you ARE identified :-(
> > if you are identified you GO TO JAIL without collecting the money ;-)
> >
> > default action: remove/disinfect
> > backup action: quarantine
>
>
> I was thinking more along the lines of since most AV still tries to
> disinfect/clean a file, rather than assume it is a whole virus, that a
> programmer could insert the recognized code with the unrecognized code
> attached, the program would report the file being cleaned and
> everything is back to normal. If this is stupid, please let me know,
> as I am not a programmer and not sure if this is how things work.


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.