home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!ukma!darwin.sura.net!newsserver.jvnc.net!netnews.upenn.edu!netnews.cc.lehigh.edu!news
- From: Amir_Netiv@f120.n9721.z9.virnet.bad.se (Amir Netiv)
- Newsgroups: comp.virus
- Subject: Good and bad viruses (was FC on virus creation)
- Message-ID: <0005.9301271940.AA16908@barnabas.cert.org>
- Date: 17 Jan 93 12:12:00 GMT
- Sender: virus-l@lehigh.edu
- Lines: 30
- Approved: news@netnews.cc.lehigh.edu
-
-
- Y. Radai writes in response to Suzana:
-
- > But it doesn't *have to* become a bad virus. And if
- > it does become one, then by most people's definitions it probably
- > wasn't really a good virus to begin with.
-
- I think the dabate concerning "goodness" of viruses, has gone out of
- hand here... The question should not be if a virus is good or bad
- according to our benefit (or losts) caused by it, but: does it's
- behaviour and method of propagation comply with certain rules that
- will make it hard to detect/clean/ prevent!
-
- For example we concider a good virus as one that:
- - Does not reveal itself "easally" :-).
- - Uses "different" (unusual) stealth techniques.
- - Uses a special (prferably "new") method of hooking a program
- (think about DIR-II). etc...
-
- Most of the terms here can be subject to many intensive
- philosophical dicussions.
-
- So to my openion the question shold be: What are the rules ?
-
- Regards
-
- * Amir Netiv, V-CARE Anti-Virus, Head team.
-
- - --- FastEcho 1.21
- * Origin: <<< NSE Software >>> Israel (9:9721/120)
-