Re: Re: Question about Viruses

[Drsolly <drsollyp () drsolly com>]

On Sat, 8 Jul 2006, Dude VanWinkle wrote:

> On 7/7/06, Peter Kosinar <goober () nuf ksp sk> wrote:
> > > well, I just ran a script to insert a newline character into all the
> > > source code for viruses I downloaded from
> > > http://www.totallygeek.com/vscdb/ so the number is now more like
> > > 400,000 :-)
> >
> > Nope, unless you inserted the newline into some kind of string, you've
> > only doubled the number of source codes... Though, you could have
> > also tried space<->tab and CRLF<->LF conversion (and combination thereof),
> > thus quadrupling the number of sources! :-)
>
>
> Forgive the ignorance, but is that all a polymorphic virus is? Someone
> adding useless code to the app to change its signature?
 
No, that isn't all it is. 

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.